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OVERSIGHT OF THE TRANSPORTATION 
SECURITY ADMINISTRATION (TSA): 
EXAMINING THE TSA’S EFFORTS AND 
PROGRESS ON H.R. 1, IMPLEMENTING 
RECOMMENDATIONS OF THE 9/11 
COMMISSION ACT OF 2007 


TUESDAY, OCTOBER 16, 2007 

U.S. Senate, 

Committee on Commerce, Science, and Transportation, 

Washington, DC. 

The Committee met, pursuant to notice, at 10:09 a.m. in room 
SR-253, Russell Senate Office Building, Hon. Byron L. Dorgan, 
presiding. 

OPENING STATEMENT OF HON. BYRON L. DORGAN, 

U.S. SENATOR FROM NORTH DAKOTA 

Senator Dorgan. I call the hearing to order this morning. Sen- 
ator Inouye is unable to be with us. Senator Stevens will be here 
in about 10 minutes. I’m Senator Dorgan. I’m joined by Senator 
Smith, from Oregon. We will begin the hearing. 

We very much appreciate the witnesses being present. This is a 
full committee hearing of the Senate Commerce Committee, an 
oversight hearing on the Transportation Security Administration, 
examining TSA’s efforts and progress on H.R. 1, Implementing Rec- 
ommendations of the 9/11 Commission Act of 2007. 

We have with us today the Honorable Edmund “Kip” Hawley, As- 
sistant Secretary for Homeland Security, and Ms. Cathleen 
Berrick, the Director of Homeland Security and Justice Issues in 
the GAO. We appreciate your attendance and your work, and we 
will proceed by asking Mr. Hawley to present testimony, and then 
we will hear from the GAO. 

Let me ask whether we have any members that wish to make 
any brief opening comments. I will put Senator Stevens’ statement 
in the record. Otherwise, we’ll go to the witnesses. 

[The prepared statement of Senator Stevens follows:] 

Prepared Statement of Hon. Ted Stevens, U.S. Senator from Alaska 

The 9/11 bill included a number of significant transportation security provisions 
in the surface sector modes as well as in aviation, which has been TSA’s primary 
area of focus. 

Anchorage International Airport continues to be the number one cargo airport in 
the U.S. based on cargo landed weight and the third largest by cargo landed weight 
worldwide. In addition to our all cargo operations, the airport is also a major trans- 
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fer point for passenger air cargo. The improved screening of passenger air cargo will 
provide a higher level of safety and security to my constituents. 

However, Alaska’s economy will be severely impacted if the cargo screening provi- 
sion in the 9/11 bill is not instituted in a manner that safeguards the flow of com- 
merce. 

I encourage TSA to work diligently and quickly to attain 100 percent screening 
of air cargo, within the bicameral agreed-upon benchmarks that were set within the 
9/11 bill. 

It is essential TSA maximize the screening of cargo on commercial personal air- 
craft without causing negative repercussions on the flow of commerce. 

Senator Smith. I have one, Mr. Chairman. 

Senator Dorgan. Senator Smith? 

STATEMENT OF HON. GORDON H. SMITH, 

U.S. SENATOR FROM OREGON 

Senator Smith. I want to thank our witnesses for being here. It’s 
been more than 6 years since the horrific morning of 9/11. On that 
day, we all woke up to the fact that there are people in the world 
who want to do us harm. While we have made notable progress in 
the last 6 years toward securing our transportation systems, there 
is still a great deal of work, obviously, to be done. 

Recently, the GAO released a report detailing the progress of the 
Department of Homeland Security in implementing its mission and 
management responsibilities. The report found, among other 
things, that, in the area of aviation and surface transportation se- 
curity, moderate progress has been made, while there has been 
substantial progress in securing the maritime environment. The 9/ 
11 Commission bill, that was signed into law this past summer, 
and the SAFE Port Act, that was enacted last year, contained a 
number of mandates aimed at further strengthening the security of 
our transportation system. 

I look forward to hearing from our administrator. Assistant Sec- 
retary Hawley, on his plans for implementing the portions of the 
9/11 Commission bill and the SAFE Port Act that fall to his agency 
to carry out. I also look forward to hearing his plans to address 
some of the issues raised by GAO in its progress report. 

So, thank you, Mr. Chairman. 

Senator Dorgan. Senator Smith, thank you very much. 

Let me just make a point on behalf of our Chairman and other 
Members as well that there’s an urgency to this issue. Transpor- 
tation security is very, very important. We know from our last pub- 
lished National Intelligence Estimate, the leadership of al Qaeda 
continues to plot additional attacks against our homeland. In fact, 
the NIE says the most significant threat to our country is al Qaeda 
and its leadership. They are reconstituted, they are recreating ter- 
rorist camps and plotting attacks against our homeland. 

It seems to me the obligation for all of us is not to try to figure 
out how to respond to attacks, but, rather, how to prevent attacks, 
and that’s why there’s an urgency about this issue of transpor- 
tation security. We have passed a number of pieces of legislation, 
as my colleague. Senator Smith, indicated. There is, uneven 
progress on some of these issues. In some cases, the money has 
been spent with not as much progress as we would hope; in other 
cases, there has been some significant strengthening and progress 
in these issues of transportation security. 
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So, your willingness to come, Secretary Hawley, and describe 
from your perspective what has happened is something we wel- 
come. And, Ms. Berrick, we appreciate, as always, the work of the 
Government Accountability Office, and we are anxious to receive 
your testimony, as well. 

So, with that. Secretary Hawley, why don’t you proceed. Your en- 
tire statement will be made a part of the permanent record, and 
you may summarize. 

STATEMENT OF HON. EDMUND S. “KIP” HAWLEY, ASSISTANT 

SECRETARY, TRANSPORTATION SECURITY ADMINISTRATION, 

U.S. DEPARTMENT OF HOMELAND SECURITY 

Mr. Hawley. Thank you. Chairman Dorgan. Good morning. Sen- 
ator Smith, Senator McCaskill. I am pleased to be here this morn- 
ing to talk about TSA’s efforts to implement provisions under the 
new law implementing recommendations of the 9/11 Commission 
Act of 2007. I’m also pleased to join Cathy Berrick, of the GAO, on 
the panel this morning. 

First, I’d like to thank this Committee for its continued support 
for TSA’s mission and for your leadership in writing the 9/11 imple- 
mentation bill. I particularly appreciate this Committee’s detailed 
understanding of TSA’s operational needs and the Committee’s 
focus on practical solutions to complex problems. 

The challenges of implementing all the provisions of the 9/11 Act 
are formidable, but TSA is committed to achieve the objectives of 
this Committee, the Congress, and the 9/11 Commission. With all 
that we have to do, as Senator Dorgan said in his introductory re- 
marks, we must keep our focus on the highest-priority items, prior- 
ities informed and driven by the current threat information. 

Since last June, we have witnessed disrupted attacks in London, 
Denmark, and Germany, as well as a completed attack on Glas- 
gow’s airport in Scotland. There is no reason to think that we are 
exempt from that kind of attack planning. The National Intel- 
ligence Estimate, as Senator Dorgan mentioned, indicates that, 
over the next 3 years, the threat will continue, with terrorists at- 
tempting transportation sector attacks on a grand scale. We know 
their focus is on using items easily available in grocery- and hard- 
ware-store shelves. That means we cannot rely on a checklist men- 
tality, searching bags for a static list of specific prohibited objects 
or becoming stuck in a predictable, and therefore vulnerable, rou- 
tine. We must use security measures that are unpredictable, agile, 
and adaptable, that put us one step ahead of evolving threats. 

As I’ve said in previous meetings with this committee, TSA has 
added layers of security and additional technology to our airport 
operations. We have continued to provide more training and real- 
threat testing to our front-line officers. Federal air marshals move 
invisibly to protect Americans wherever they fly around the globe. 
And VIPR teams deploy every week, including this one, somewhere 
in the United States, to support State and local security efforts ev- 
erywhere in transportation. That is our focus every day. It is on 
that base of daily operations that we address the new requirements 
from the 9/11 legislation. 

In prior hearings, we’ve discussed TWIG and Secure Flight. We 
have discussed the challenges and opportunities of both programs. 
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After a great deal of work to strengthen the foundations and build 
privacy protections into both programs, I am pleased to report that 
TWIG and Secure Flight are back on track and moving forward. 

When I appeared before this committee in April, I said the TWIG 
card was on its way. Today, TWIG is up and running. Over the 
next 5 years, approximately a million individuals will use a TWIG 
card, interoperable at 3,200 facilities and 10,000 vessels. Enroll- 
ments for TWIG are underway, as we speak, in Delaware this 
morning. Already, we’ve had more than 1,000 pre-enrollments on- 
line, and the pace will accelerate across the ports through the end 
of calendar year 2007 and continue at full speed through 2008. 

When I spoke to you last January, we had a very direct conversa- 
tion about Secure Flight. I promised that we would complete the 
rebaselining of the program, build in privacy protections, and pub- 
lish the rule. We have done those things, and we are ready to go. 

The rule for Secure Flight has been published, and, after a public 
hearing in September that was available live on the Internet, the 
comment period is open now. It closes next week, and we expect 
to get the final rule out in spring of 2008. 

Should the Gongress choose to fully fund the program in Fiscal 
Year 2008, we can begin testing in 2008. 

I am mindful that, despite the progress that TSA has made 
across the board, that there is still much to do, and I look forward 
to our work together to further strengthen security throughout our 
transportation network. Thank you for the opportunity to appear. 
I would be happy to answer questions. 

Thank you. 

[The prepared statement of Mr. Hawley follows:] 

Prepared Statement of Hon. Edmund S. “Kip” Hawley, Assistant Secretary, 

Transportation Security Administration, U.S. Department of Homeland 

Security 

Good morning. Chairman Inouye, Vice Chairman Stevens, and distinguished 
Members of the Committee. I am pleased to speak with you this morning to discuss 
the state of transportation security and the Transportation Security Administra- 
tion’s (TSA) efforts to begin implementation of the important bill that you just 
passed — the Implementing Recommendations of the 9/11 Commission Act of 2007, 
Pub. L. 110-53, (9/11 Act). 

First, I would like to thank this Committee for the continued support you have 
given TSA since its inception and to the Committee staff for its professionalism and 
the hard work and cooperative spirit they displayed in working with the Depart- 
ment of Homeland Security (Department) and TSA to finalize the provisions of the 
9/11 Act. 

TSA appreciates that the 9/11 Act includes many provisions which we sought as 
tools to provide better transportation security to the United States. In particular, 
we are pleased that based on this Committee’s leadership, the 9/11 Act gives us the 
flexibility to craft a robust air cargo security system that will provide security and 
an unimpeded flow of commerce. We also appreciate that the 9/11 Act recognizes 
and supports the expansive training that we are providing to our Transportation Se- 
curity Officer (TSO) workforce to move our security outward from the static check- 
point. We very much needed authority to establish an administrative process for 
civil enforcement of surface transportation regulations and orders and you gave us 
that authority. Additionally, you emphatically recognized the importance of our inte- 
grated Visible Intermodal Prevention and Response teams (VIPR), which provide a 
mobile surge of TSA resources in all modes of transportation. 

It is also important to understand the challenge that the 9/11 Act places on TSA 
and our resources. Fully half of the many tasks required of the Department by the 
9/11 Act fall on TSA’s shoulders. They affect all aspects of transportation security, 
including strategic planning, aviation security, rail security, security of public tran- 
sit facilities, pipelines, over-the-road buses, and trucking security. TSA has a big 
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task in continuing the implementation of the 9/11 Act and in working with the 
many stakeholders in the transportation sector to assure the level of security that 
Congress and the 9/11 Commission envisioned. TSA will now need to integrate the 
many mandates in the 9/11 Act into our current priorities and resources to enable 
key initiatives to progress without delay while not losing focus on our threat-based 
operations. 

The current restriction on funding presents an immediate challenge for TSA’s ef- 
forts to implement certain requirements of the 9/11 Act. As you know, we are oper- 
ating under a Continuing Resolution (CR). The CR presents additional financial 
challenges to TSA as we are limited in our spending to a prescribed formula based 
on our Fiscal Year (FY) 2007 appropriations, and we are prohibited from initiating 
new programs or projects that were not funded in Fiscal Year (FY) 2007. Placed in 
the context of implementing the 9/11 Act, this situation creates particularly difficult 
challenges. 

Additionally, many of the rulemaking requirements mandated in the 9/11 Act do 
not adequately recognize the obligations that TSA must give the many stakeholders 
affected by proposed regulations and the general public an opportunity to be heard 
throughout the development process. These requirements are time consuming but 
are time well spent to assure that our regulations achieve their objective in a way 
that is transparent to stakeholders and the public and does not adversely affect 
travel and commerce. 

TSA is actively working to implement the 9/11 Act and we are assessing what re- 
sources are needed to continue the implementation. We are working with our part- 
ners in the Department and other Federal agencies toward those goals that require 
close cooperation to implement inter-Departmental and inter-agency requirements. 

Ongoing Threat 

Before I discuss in greater detail the current and future efforts of TSA to secure 
our Nation’s transportation systems and fulfill the requirements of the 9/11 Act, I 
believe it is important for me to explain the context in which TSA operates and the 
direction TSA is going to anticipate threats to transportation. 

The effort to ensure the security of the transportation system remains as impor- 
tant now as it ever has been in the past 6 years. The National Intelligence Estimate 
on threats to the U.S. Homeland issued in July 2007 confirmed publicly that the 
terrorist threat is real. This threat is persistent and evolving. Terrorists maintain 
an undiminished intent to attack the Homeland and show a continued effort to 
adapt and improve their capabilities. They are innovative in overcoming security ob- 
stacles. They are training to use improvised explosive devices (lED). Terror groups 
continue to focus on prominent infrastructure targets with the goal of producing 
mass casualties. We know they are working to defeat us, and we must remain vigi- 
lant. 

Keeping Ahead of Terrorists 

TSA’s security strategy is based on flexible, mobile, and unpredictable methods. 
To counter the evolving threat and adaptive capabilities of terrorists, we are staying 
ahead by rethinking the entire screening process and changing the legacy systems 
that originated in the 1970s. We are going on the offense to address current threats. 
We are being proactive in an effort to stay ahead of the threats. We, therefore, rely 
heavily upon intelligence. 

Intelligence and information sharing are at the core of our overall transportation 
security strategy. Building on the efforts of our partners in the Intelligence Commu- 
nity (IC), we use intelligence and analysis to prioritize our security activities. We 
begin each day with briefings on the latest intelligence from the IC, and that infor- 
mation drives our decisionmaking process both operationally and strategically. In 
addition, we share intelligence as appropriate with our front-line employees and 
stakeholders, enabling them to make informed security decisions. 

Sharing intelligence information with our stakeholders in surface transportation 
is especially important as they are primarily responsible for providing the direct 
staff and resources to secure their respective transportation systems. Providing in- 
telligence to these stakeholders enables us to partner with them through our secu- 
rity grant programs to apply resources in the most effective way possible. 

We recognize that we cannot protect every person or all property against every 
possible threat to the system. Given the nature of the threats to aviation, we must 
manage risk consistent with what we understand of the threats, vulnerabilities, and 
consequences. We will prioritize our resources to protect against the high-threat, 
high-consequence events. 
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Aviation Security 

The discussion of aviation security almost always starts at the familiar TSA secu- 
rity checkpoint. For the two million travelers a day who fly, that is TSA to them. 
However, TSA looks at the checkpoint as but a piece — an important piece — of a 
much larger picture. Therefore, before discussing checkpoint issues, I would like to 
point out that TSA looks at the entire transportation network in evaluating risk, 
including threat information. A large part of TSA’s work involves working closely 
on a daily basis with the intelligence and law enforcement communities and our 
global partners to try to stay ahead of the current threat. 

We have to be strong at the checkpoint, but also many other places — including 
the back, front, and sides of the airport. Risk-based security means that we take 
the whole picture into account and implement selective and unpredictable security 
measures. We must first deny the terrorist a stationary target where a planner can 
take the time to map an attack with high odds of success. Nothing can be uncov- 
ered, but likewise, we cannot fool ourselves into thinking that fixed, robust security 
is impenetrable. Our security needs to play offense, not just defense. 

TSA is focusing beyond the physical checkpoint — to push our borders out, so to 
speak — to look more at people and to identify those with hostile intent or those con- 
ducting surveillance even if they are not carrying a prohibited item. By spreading 
our layers of security throughout the airport environment and elsewhere, we have 
multiple opportunities to detect terrorists and leverage the capabilities of our work- 
force, our partners, and our technology. 

Travel Document Checking 

We are placing specially trained TSOs at the front of the checkpoint to review 
travel documents to find fraudulent identification (IDs) and also to look at behavior. 
The 9/11 Commission recognized that travel documents are akin to weapons for ter- 
rorists. We will make it harder for dangerous people to use fraudulent documents 
and IDs by raising the standard of inspection and providing additional equipment 
for our TSOs to perform this function. We ask this Committee to fully support the 
President’s budget for this program so that TSA can make a seamless transition 
from the airlines and continue the program with as little disruption as possible to 
the flow of passenger screening. 

Behavior Observation 

We continue to expand the Screening Passengers by Observation Techniques 
(SPOT) program, which utilizes non-intrusive behavior observation and analysis 
techniques to identify potentially high-risk passengers. Individuals exhibiting spe- 
cific observable behaviors may be referred for additional screening at the checkpoint 
that may include handwanding, pat down, or physical inspection of their carry-on 
baggage. SPOT adds an element of unpredictability to the security screening process 
that is easy for passengers to navigate but difficult for terrorists to manipulate. It 
serves as an important additional layer of security in the airport environment, re- 
quires no additional specialized screening equipment, can easily be deployed to 
other modes of transportation, and presents yet one more challenge for terrorists at- 
tempting to defeat our security system. The SPOT program has already added great 
value to our overall security system. For example, a Behavior Detection Officer re- 
cently identified an individual at a ticket counter carrying a loaded gun and more 
than 30 rounds of ammunition. 

Aviation Direct Access Screening Program 

We continue to expand the Aviation Direct Access Screening Program — deploying 
TSOs and Transportation Security Inspectors (TSIs) to locations throughout airports 
to screen airport employees, their accessible property, and vehicles entering a direct 
access point to secured areas of airports. The random screening at unexpected loca- 
tions is a valuable measure to increase the protection on the “back side” of airports. 

This random and unpredictable screening allows airport workers to perform their 
duties with minimal interruptions and keeps the aviation industry operating. TSA’s 
approach is both practical and effective. Requiring 100 percent screening of all air- 
port workers, even in a pilot program, is contrary to this philosophy; it unneces- 
sarily diverts resources from higher risk operations without providing the improve- 
ments in security that we need. We would like to continue to work with the Com- 
mittee to craft a pilot program that will test var3ring methods of improving an air- 
port worker screening program that will offer better security. 

This strategy of active, nimble, flexible security depends on the quality of the peo- 
ple involved. TSA has had a major focus on improving security by improving the 
capabilities of its people. Better recruiting and hiring, better training, better incen- 
tive systems, career progression opportunity, more involvement in decisions effect- 



7 


ing the workforce, and more recognition of the critical role played by our people — 
these efforts all have a positive effect on the security result TSA delivers. The suc- 
cess of all these programs in increasing the layers of security would not be possible 
without the incredible effort, professionalism, and dedication shown by TSA’s work- 
force. Our highly trained and highly motivated workforce — TSOs, TSIs, Federal Air 
Marshals (FAMs), and other professionals — have proven to be a nimble, adaptable 
workforce that can quickly adjust to counter an emerging terrorist threat. In August 
of 2006, TSOs employed new standard operating procedures within hours to deal 
with the threat identified as part of the United Kingdom (UK) plot to blow up com- 
mercial aircraft with liquid explosives. TSA has rapidly deployed FAMs to inter- 
national destinations to support its mission coverage based on new threats. We are 
constantly reviewing and adjusting our procedures and strategies to ensure our per- 
sonnel are ahead of the next threat. TSA’s workforce has met every challenge in the 
past 5 years and I am confident they will continue to do so. 

Workforce Safety 

Maintaining a healthy, able-bodied workforce is also critical to TSA’s mission. We 
improved workplace safety through a series of aggressive initiatives, including nurse 
case managers. Optimization and Safety Teams, automated injury claims filing proc- 
ess, involvement of the National Advisory Council in planning and implementing 
the Safety Week Campaign and other aspects of the Safety Program, deployment 
of contract safety specialists to support TSA field operations, and speedy investiga- 
tions to correct safety problems. Through these programs, TSA has reduced the rate 
for employees losing time from duty due to injury by almost half from 11.56 per 100 
employees in FY 2005 to 6.75 for the 3rd quarter of FY 2007. 

New Technology 

We are also adding significant new technology. A lesson from 9/11 is that we must 
be proactive — we must anticipate threats that continue to grow in sophistication and 
complexity. This effort includes leveraging the skills of our TSOs with new tech- 
nology. This next generation of technology will assist our TSOs in separating friend 
from foe, increasing efficiency, and helping minimize the impact to travelers and 
businesses: 

• Advanced Technology (AT) X-ray. We will begin deploying AT X-ray equipment 
for carry-on baggage. It provides TSOs with a better capability to identify and 
detect threats through improved imagery and analysis tools. 

• Checkpoint Automated Carry-On Explosives Detection Systems (Auto-EDS). We 
are exploring Auto-EDS for inspecting carry-on items. Auto-EDS may provide 
additional detection and automation opportunities. 

• Whole Body Imagers. We are pilot testing whole body imagers, such as the 
backscatter and millimeter wave technologies, to quickly and safely screen pas- 
sengers for prohibited items without the need for physical contact on a vol- 
untary basis. 

• Cast and Prosthesis Scanner. We are testing new cast and prosthesis scanners 
to provide a safe, dignified, and non-invasive way to identify potential threats 
and clear passengers wearing casts, braces, and prosthetic devices. 

• Bottled Liquids Scanners. We have begun deploying liquids scanning devices at 
checkpoints, and are now using a hand-held liquids scanner for non-checkpoint 
screening locations. 

• New Explosives Detection Systems. We are evaluating several new products that 
will greatly increase the speed of handling and screening checked baggage, par- 
ticularly when integrated into an airport’s baggage handling system, while re- 
ducing the size of the footprint of the baggage screening location. 

Improving Security By Improving the Security Experience 

Despite the critical need for enhanced security measures, such as the requirement 
to remove all shoes and the restrictions on liquids, gels, and aerosols, we know we 
need to improve the checkpoint screening process so it is less stressful for the trav- 
eling public. 

Working with our stakeholders, we are pursuing programs and processes that im- 
prove the security screening process. We are moving from the legacy approach of 
simply looking for weapons to a more fluid process focused on the goals of: (1) im- 
proving detection of explosives; and (2) developing the capability to evaluate travel 
documents as well as detect hostile intent or possible surveillance. 
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Looking Ahead in Aviation Security 

Screening of Air Cargo 

As you know, the 9/11 Act requires the establishment of a system for industry 
to screen 100 percent of cargo transported on passenger aircraft within 3 years. As 
we proceed toward enabling industry to meet the cargo screening requirements, TSA 
will stress effective security management of the air cargo supply chain. This process 
will require substantial collaboration with stakeholders, specifically, U.S. -based 
shippers, freight forwarders, and passenger air carriers. This Committee was a lead- 
er in including key language in the bill that authorizes TSA to develop and imple- 
ment a program that will enable shippers to screen cargo early in the supply chain 
using currently approved screening methods and meeting additional stringent facil- 
ity and personnel security standards. This is a critical element in enabling the im- 
proved security for air cargo on passenger aircraft that Congress requires. I am 
grateful to the Committee for its recognition that better screening occurs when ship- 
ments are screened and secured at various points along the supply chain. Waiting 
until the freight is dropped at the airport, often in large pallets, to begin screening 
would result in less effective screening as well as defeat the whole purpose of the 
air cargo system that strives to provide expeditious delivery of goods from origin to 
destination. We are working closely with all stakeholders within the air cargo sup- 
ply chain and our initial feedback has been very positive. The stakeholders clearly 
recognize the need to achieve our country’s heightened security requirements while 
continuing the free flow of commerce upon which our economy relies. TSA will build 
upon our established programs: air cargo security regulations; Security Directives; 
the Known Shipper Management System; and increased use of TSA-certified explo- 
sives detection canine teams and Transportation Security Inspectors for Cargo. 

In addition, the $80 million dollars appropriated to TSA this year for air cargo 
security as part of the FY2007 Emergency Supplemental Appropriations Act (Pub. 
L. 110-28) will contribute to our increased efforts through the hiring of at least 150 
additional cargo inspectors and expansion of the National Explosives Detection Ca- 
nine Program by no fewer than 170 teams. 

Secure Flight 

TSA has taken a significant step toward implementing the recommendation of the 
9/11 Commission and the requirement of the Intelligence Reform and Terrorism Pre- 
vention Act of 2004 to enhance the vetting of aviation passengers against terrorist 
watch lists. On August 23, 2007, TSA published a Notice of Proposed Rulemaking 
(NPRM) proposing implementation of the Secure Flight program. Secure Flight, if 
implemented as proposed, will bring the process of comparing passenger names 
against the watch list, now performed by aircraft operators, into the government, 
and will align domestic and international passenger pre-screening. By establishing 
a more consistent and effective watch list matching process, TSA will strengthen a 
key layer of security and enhance its ability to stop terrorists before they get to the 
passenger screening checkpoint. The program is designed to better focus enhanced 
passenger screening efforts on individuals likely to pose a threat to civil aviation, 
and to facilitate the secure and efficient travel of the vast majority of the traveling 
public by distinguishing them from individuals on the watch list. 

We have taken the time to build the Secure Flight program right, and we believe 
that the NPRM and associated Privacy Act System of Records Notice and Privacy 
Impact Assessment demonstrate that TSA has built a program with the operational 
requirements necessary to enhance aviation security while protecting the privacy 
and civil liberties of the traveling public. The Traveler Redress Inquiry Program 
(DHS TRIP) is available for passengers who feel they have been improperly delayed 
or prohibited from boarding an aircraft. 

Over the next few months, TSA intends to begin a testing period using data from 
aircraft operators that volunteer to participate. During testing, air carriers will con- 
tinue conducting watch list checks for domestic flights, and TSA will compare the 
results of its watch list matching with air carrier results to ensure the validity of 
the Secure Flight system. 

It is therefore extremely critical that Congress provide the necessary funding for 
Secure Flight requested by the President in the FY 2008 budget. Without the nec- 
essary funding, the program will have to scale back benchmark testing with air- 
lines, Secure Flight system to airline system testing, parallel operations with air- 
lines, and the stand up of the Secure Flight Service Center or Secure Flight Oper- 
ations Center. In short, the pro^am would have a system with no ability to connect, 
communicate, or test with airlines for the purposes of implementation. Important 
contract awards would be postponed. From a schedule perspective, rollout of the Se- 
cure Flight program would be severely delayed. An immediate concern is the signifi- 
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cant budget constraint imposed on the Secure Flight program due to the enactment 
of the current CR. The restrictions on funding under the CR will inhibit TSA’s abil- 
ity to implement this critical program to improve aviation security and fulfill a key 
recommendation of the 9/11 Commission. Now that we have demonstrated major 
progress on the Secure Flight program through the issuance of the NPRM and asso- 
ciated privacy documents, we need your support to fund this vital program. 

General Aviation 

TSA is working closely with the general aviation (GA) community to develop rea- 
sonable, feasible, and effective security for GA operations while ensuring that these 
measures support continued operations and increased growth of the industry. 

TSA is also working with aircraft operators and Fixed Base Operators directly to 
develop voluntary programs of verifying the identification of passengers on board 
aircraft and maintaining facility security in and around GA aircraft. 

TSA is working closely with our interagency partners to improve GA security. The 
U.S. Customs and Border Protection (CBP) recently issued a NPRM that will re- 
quire GA operators to submit comprehensive manifest data about passengers, crew, 
and flight information electronically to CBP, as part of its Electronic Advance Pas- 
senger Information System (e-APIS), at least 60 minutes before the aircraft departs 
for the United States. 

Currently, we only receive very basic information from GA aircraft coming into 
the United States, such as who is and is not a U.S. citizen. That is not enough. Hav- 
ing this information an hour before departure will give CBP inspectors more time 
to fully pre-screen travelers and crews and take necessary actions to resolve threats. 

Surface Transportation Security 

As the security framework for transportation continues to grow, TSA is moving 
to apply many of the same tools to protect all modes of transportation. TSA is build- 
ing information sharing networks in surface transportation. We work closely with 
stakeholders in these industries, putting an emphasis on sharing intelligence, capac- 
ity, and technology with that of other law enforcement, intelligence or other agen- 
cies at every level of government. 

When I appeared before this Committee in January, I explained TSA’s com- 
prehensive strategy that we are applying across all transportation networks, regard- 
less of mode. Today, I want to focus on the last two elements of our strategy: closing 
gaps; and developing enhanced security systems. 

Program Improvements 

Freight Rail. Secretary Chertoff established the priority goal of achieving a 50 
percent drop in the objectively measured risk posed by rail cars carrying toxic inha- 
lation hazards (TIH) by the end of 2008. To achieve this goal, TSA is implementing 
a multi-layered security strategy which includes regulatory development, coopera- 
tive agreements, and comprehensive risk-based programs. 

On December 21, 2006, TSA published a proposed rule (NPRM) to strengthen the 
security of the Nation’s freight rail systems in high threat urban areas (HTUA). The 
NPRM addressed shippers, carriers, and receivers of TIHs and other security-sen- 
sitive materials by rail. Proposed requirements include railcar location reporting 
within a specific time period and the establishment of a secure chain of custody in 
and through HTUAs. 'TSA also proposed requirements for designating rail security 
coordinators and suspicious incident reporting by rail mass transit, passenger rail, 
and all freight rail carriers. We intend to publish this final rule by the end of the 
year. 

Prior to publishing the NPRM, TSA separately reached an agreement with the 
rail carrier industry to reduce the standstill time of unattended TIH cars in HTUAs 
beginning in early 2007. To support this effort, TSA is developing a comprehensive 
database to identify highest priority risk reduction opportunities. Additionally, 
working in conjunction with TSA, the Nation’s rail carriers are developing site-spe- 
cific security plans focused on reducing the risk of TIH cars in HTUAs. 

In addition to reducing the risks to TIH in freight rail transportation, TSA is 
working with rail carriers to raise the baseline in security training. TSA is devel- 
oping a training video that addresses inspection of TIH rail cars, emphasizing the 
recognition of lEDs, as well as general security awareness for rail employees. The 
video will be available by the end of the year. 

Passenger Transit Programs and Grants. TSA, in partnership with the Federal 
Emergency Management Agency and the Federal Transit Administration, leverages 
the Transit Security Grant Program funds to focus on reducing risk and increasing 
security capabilities in State and local transit systems with the most risk. We are 
continuing research to expand our understanding of the vulnerabilities and the con- 
sequences of terrorist attacks on our critical infrastructure, applying the results as 
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they are developed in immediate and phased mitigation strategies. We have 
partnered with the National Laboratories and affected passenger transit systems to 
complete assessments of the Nation’s 29 underwater transit tunnels and produce 
priorities for risk mitigation. From the information gained, TSA developed action 
items intended to elevate security, harden targets, and mitigate risk using available 
resources and investment of grant funds. 

A recent change to the Transit Security Grant Program supports the ability of 
high-risk systems to field dedicated anti-terrorism teams through cooperative fund- 
ing of operational packages. This initiative provides funding for the training and op- 
erations of teams specifically deployed to engage in visible and covert activities to 
detect, disrupt, and deter terrorist activities. 

TSA trains and certifies explosives detection canine teams to provide a mobile and 
flexible deterrence and detection capability to passenger transit systems. Since late 
2005, TSA’s National Explosive Detection Canine Team Program has partnered with 
passenger transit systems to deploy some 60 explosives detection canine teams to 
14 major transit systems using a risk-based application of resources. More than 50 
of these teams are currently in place, with the remaining force projected for train- 
ing, certification, and deployment in the coming months. 

The Department has awarded roughly $18 billion to State and local governments 
for programs and equipment that help to manage risk. In passenger transit, the 
Transit Security Grant Program, which funded $275 million in FY 2007, is the cen- 
terpiece of the Department’s interagency strategy to close gaps in operator security 
status and baseline standards. The Department allocates those grants to enhance 
capabilities in areas of weakness identified in the system security assessments 
under the BASE program, with particular emphasis on elevating security posture 
in six fundamental areas underpinning the broader transit security strategy. These 
priority areas are protection of underwater and underground infrastructure; protec- 
tion of other high consequence systems and assets; expanded random, unpredictable 
security activities for deterrent and disruptive effect against terrorist planning and 
reconnaissance; security training of frontline employees; drills and exercises; and 
public outreach and awareness. Cooperative efforts through the Regional Transit Se- 
curity Working Groups in higher risk areas secure agreement on risk-based prior- 
ities and security enhancement solutions advanced by targeted application of grant 
funds. Amtrak participates in these regional meetings. Additionally, TSA engages 
directly with Amtrak to reach agreement on risk-based priorities and the most effec- 
tive use of grant funds for risk mitigation and security enhancement. 

An area security assessment indicated a need for a more focused effort on security 
training for transit agency employees. Although an extensive Federal security train- 
ing program has been implemented since 9/11 — including 17 security courses, more 
than 500 course presentations, and more than 78,000 transit employees trained — 
the assessment results indicate wide variations in the quality of transit agencies’ 
security training programs and an inadequate level of refresher or follow-on train- 
ing. Well-trained employees are a security force multiplier for security efforts imple- 
mented by transit agencies. To close the gap identified in the assessments, TSA pro- 
duced a Mass Transit Security Training Program that assists agencies in developing 
and implementing more consistent training programs. The program aligns sub- 
stantive training areas with specific types of employees, which in turn guides the 
development and execution of training programs. To support actual delivery of train- 
ing courses, the Transit Security Grant Program offers a streamlined application 
process to fund the instruction and overtime costs incurred by substitutions for em- 
ployees in training. This initiative significantly expands the volume and quality of 
training for transit employees during 2007. TSA anticipates maintaining this com- 
mitment in future years, as resources allow. 

The collective effort in passenger transit security aims to build security force mul- 
tipliers in the rail and bus systems — the capabilities of law enforcement and front- 
line employees and the awareness of the traveling public — and to maximize regional 
collaboration for the employment of the full range of available resources in random, 
unpredictable applications for a deterrent effect. 

Highway. TSA is working on a number of strategies to close gaps in performance. 
We are currently considering a number of voluntary incentive programs and regu- 
latory options. Prior to the enactment of the 9/11 Act, TSA was developing many 
programs and initiatives in collaboration with industry within the context of imple- 
menting the National Infrastructure Protection Plan, Transportation Systems Sec- 
tor-Specific Plan (TSSP), Highway and Motor Carrier Modal Annex. 

These programs and initiatives include the following: 

Training: The School Transportation Security Awareness Program, Hazardous 

Materials (HAZMAT) Motor Carrier Security Self-Assessment Program, Federal 
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Law Enforcement Training Center (FLETC) training course for commercial 
motor vehicle (CMV) enforcement officers and security specialists, and Oper- 
ation Secure Transport Training Program for the over-the-road bus industry 
were developed. 

Standards ! Guidelines: Security Standards are currently being developed in col- 
laboration with industry for the HAZMAT Motor Carrier industry, the School 
Transportation Industry, the over-the-road bus industry, and the Highway In- 
frastructure sector. 

Information Sharing: The Highway and Motor Carrier sector Government Co- 
ordinating Council (GCC) and Sector Coordinating Council (SCO have been de- 
veloped and are actively meeting on a regular basis. In addition, the Homeland 
Security Information Network Highway portal, TSA Highway & Motor Carrier 
(HMC) Webpage, internal TSA Highway and Motor monthly newsletter for field 
personnel, and inclusion of security notes in industry trade periodicals have 
been developed. The Highway and Motor Carrier Industry Information and 
Analysis Center and Highway Watch programs are active and continually proc- 
essing reports from highway operators and sharing information between indus- 
try and TSA. 

Domain Awareness: Corporate Security Reviews (CSRs) are conducted with or- 
ganizations engaged in transportation by motor vehicle, as well as those that 
maintain or operate key physical assets within the highway transportation com- 
munity, with a current focus on the transportation of HAZMAT transported by 
motor carriers. TSA is developing a pilot project for testing the feasibility of 
tracking trucks carr3ring HAZMAT. This practice will allow not only the con- 
tinual tracking of truck locations, but also hazardous load types in all 50 states. 
The pilot includes the development of a set of protocols capable of interfacing 
with existing truck tracking systems, State and local government intelligence 
operations centers, and Federal law enforcement agencies, as well as first re- 
sponders. The Integrated Intermodal Information System-Domestic Feasibility 
Study focused on the transportation of Extremely Hazardous Materials through- 
out the domestic transportation system. 

Plans and Exercises: The Highway and Motor Carrier GCC collaborated with 
the HMC see to create the Highway Infrastructure and Motor Carrier Modal 
Annex to the Transportation System Sector-Specific Plan. This document de- 
scribes how the goals and objectives of the transportation sector will be 
achieved to protect the highway transportation system. 

Risk Management and Grants: The Highway Watch Program® is a TSA grant 
initiative that is administered by the American Trucking Associations with an 
enrollment of nearly 500,000 driving professionals to observe, assess, and report 
incidents to the appropriate authorities that are potential terrorist activities, ac- 
cidents, disabled vehicles, hazardous road conditions, or other highway inci- 
dents. In January 2006, TSA initiated a CSR pilot program with the State of 
Missouri Department of Transportation Motor Carriers Services Division 
(MoDOT). 44 MoDOT officers were trained to conduct over 2,700 CSRs during 
their safety audits on trucking companies and their equipment within Missouri. 
The HAZMAT Motor Carrier Security Self-Assessment Training program fo- 
cuses on transportation security regulations and specific terrorist and criminal 
threats to the HAZMAT motor carrier industry. It conducts security assess- 
ments, produces security action items, and reports procedures for security re- 
lated incidents. The HMC office is supporting the Intercity Bus Security Grant 
Program in assessing which over-the-road motorcoaches qualify for grants and 
how the grant funding can be used to enhance motorcoach security. Addition- 
ally, in partnership with the motorcoach industry, we developed training enti- 
tled “Operation Secure Transport”, which is specifically geared toward pas- 
senger motor carrier operators. 

Pipeline. TSA initiated a number of programs to assist pipeline companies in their 
efforts to secure these vital systems. For example, through the CSR Program, we 
compiled the best security practices observed throughout the industry and estab- 
lished that pipeline companies adopt a minimum of 70 percent of TSA pipeline secu- 
rity guidelines. 

TSA partnered with our counterparts in Natural Resources Canada (NRCan) to 
hold an International Pipeline Security Forum. This event provided an opportunity 
for pipeline companies, industry associations, and government representatives to ex- 
change security information and best practices. We continue to work with NRCan 
on cross border pipeline assessments in accordance with the Security and Prosperity 
Partnership agreement. 
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Identifying a shortfall in security awareness training through the CSR results, 
TSA developed a compact disc-based training program. Over 300 U.S. pipeline com- 
panies, representing approximately 61,000 industry employees, have requested the 
CD and accompan 3 dng brochure. 

Enhanced Systems of Security 

The final part of our strategy is to enhance the systems of security. As we take 
actions to close gaps, we also need to improve security technology and practices that 
apply to multiple modes of transportation. 

Over this past summer we began to more broadly deploy VIPR teams in aviation 
and surface transportation facilities. Comprised of TSOs, TSIs, and FAMs, VIPR 
teams collaborate with local law enforcement agencies to intensify the visible pres- 
ence of security personnel at various points throughout the transportation system. 
More than 100 VIPR deployments have been conducted at key commuter and re- 
gional passenger rail facilities, Amtrak stations, ferries, and airports. VIPR teams 
have proven that TSA and our stakeholders can greatly improve security by altering 
and enhancing security measures at transportation facilities. 

The Department is developing a number of screening techniques and technologies 
which may be implemented or deployed quickly to systems facing a specific threat, 
or in support of major events such as National Special Security Events. Pilot pro- 
grams to test these technologies are already underway in several major American 
cities. 

Mitigation of risk to underwater and underground infrastructure is a top priority 
of the joint Department Science and Technology Directorate and TSA research and 
development effort. Collaborative efforts with particular systems as operational test 
beds advance development of anomaly detection and explosives trace detection; 
smart video surveillance; and integrated prevention and response actions by secu- 
rity and law enforcement personnel. As one example, through the Rail Security 
Pilot, the Department field tested the effectiveness of explosives detection tech- 
niques and imaging technologies in partnership with the Port Authority of New 
York and New Jersey. 

Finally, we maintain mobile security equipment, which can fit into two standard 
size shipping containers, for rapid deployment for use in screening and detection at 
any major system in the country, should the need arise. 

In addition to technologies that may apply primarily to passenger modes, TSA is 
working closely with a number of parties to develop advanced railcar tracking sys- 
tems with geofenced event-notification capabilities. TSA is also cooperating in efforts 
to develop next generation hazardous materials rail cars designed to better with- 
stand terrorist attacks and operating accidents. 

TSA is working with selected hazardous material carriers to test truck tracking 
and control technologies. We are also in the early stages of security technology ap- 
plications to the pipeline industry. Two specific areas TSA is involved in are blast 
mitigation and unmanned aerial surveillance vehicles. 

In addition to our progress toward implementing the requirements of the 9/11 Act, 
I am pleased to report to this Committee the success of another milestone for TSA 
and the Department. Today, port workers, longshoremen, truckers, and others at 
the port of Wilmington, Delaware became the first workers in the Nation to begin 
enrollment in the DHS Transportation Worker Identification Credential (TWIC) pro- 
gram. This program will ensure that any individual with unescorted access to secure 
areas of port facilities and vessels received a thorough background check and is not 
a security threat. TWIC will be one of the world’s most advanced, interoperable bio- 
metric credentialing programs and is powered by state-of-the-art technologies. I 
would like to thank our partners, the U.S. Coast Guard, and maritime stakeholders 
for their valuable input, for making the launching of the TWIC program a reality. 

Conclusion 

Although the threats and challenges to the security of transportation systems are 
numerous, so are the solutions and efforts of TSA to continue to successfully carry 
out our mission. We will continue to use our personnel, information, and technology 
in innovative ways to stay ahead of the evolving threats and facilitate passenger 
travel and the flow of commerce. 

Chairman Inouye, Vice Chairman Stevens, thank you again for the opportunity 
to testify today. I am happy to respond to the Committee’s questions. 

Senator Dorgan. We’re going to ask Ms. Derrick to present her 
testimony from the Government Accountability Office, at which 
point we will he able to ask questions of both witnesses. 
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Ms. Berrick, thank you very much for being here, and you may 
proceed. 

STATEMENT OF CATHLEEN A. BERRICK, DIRECTOR, 
HOMELAND SECURITY AND JUSTICE ISSUES, 

U.S. GOVERNMENT ACCOUNTABILITY OFFICE (GAO) 

Ms. Berrick. Thank you, Senator Dorgan, Vice Chairman Ste- 
vens, and Members of the (Ilommittee, for inviting me here to dis- 
cuss GAO’s work assessing TSA’s progress in securing the trans- 
portation network. 

In August 2007, shortly after the Department of Homeland Secu- 
rity’s 4-year anniversary, we reported on DHS’s progress in satis- 
fying its key mission and management functions, including secur- 
ing aviation and surface modes of transportation. We based our as- 
sessment on over 400 reports and testimonies we’ve completed, as- 
sessing DHS’s operations, and, by determining whether DHS gen- 
erally achieved or generally did not achieve key performance expec- 
tations set out for them by Congress, the Administration, and the 
Department itself. 

(Overall, we reported that TSA has made moderate progress in 
securing transportation systems. With respect to commercial avia- 
tion, we found that TSA generally achieved about 70 percent of the 
24 performance expectations established for them. For example, 
TSA has made significant progress in hiring, deploying, training, 
and measuring the performance of its aviation security workforce. 
These efforts include the development of robust training programs 
for TSO’s, including enhanced explosives detection training and 
standards for determining appropriate TSO staffing levels at air- 
ports. TSA also made significant progress in balancing security and 
efficiency in its checkpoint screening procedures and in deploying 
checked baggage screening equipment. However, we found that 
DHS and TSA have made less progress in securing airport perim- 
eters and access to restricted areas, deploying technologies to de- 
tect explosives at checkpoints and to screen air cargo, and fielding 
a system to prescreen airline passengers against terrorist watch 
lists for domestic flights, although progress is being made in all of 
these areas. 

One of the most critical areas in which limited progress has been 
made is in the deployment of technologies at airport checkpoints to 
detect explosives on passengers and in their carry-on bags. Al- 
though DHS is developing and testing these technologies today, the 
Department reported that the extensive deployment of new tech- 
nologies at the checkpoint will not be realized for another 2 years. 

Regarding the security of surface modes of transportation, we re- 
ported that TSA generally achieved about 60 percent of the per- 
formance expectations established for them, or three of five expec- 
tations, but their efforts, especially related to commercial vehicles 
and highway infrastructure, are still relatively in the early stages. 

In terms of progress, DHS and TSA have developed an approach 
for securing surface transportation modes through a strategy, have 
conducted risk assessments of related assets, and they have admin- 
istered grant programs; however, TSA has not determined whether 
it will issue standards for securing all surface transportation 
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modes, and is still defining what its regulatory and oversight role 
will he for these modes. 

We also found that, although TSA has made progress in con- 
ducting compliance inspections of some systems, inspectors’ roles 
and missions have not yet heen fully defined. 

We also reported that a variety of cross-cutting issues have af- 
fected DHS’s and TSA’s efforts in implementing its mission and 
management functions. These include developing results-oriented 
goals and measures to assess performance, developing and inte- 
grating a risk-hased approach to guide investment decisions, and 
establishing effective frameworks and mechanisms for sharing in- 
formation and coordinating with stakeholders. It will be important 
for the entire Department to continue to address these issues as it 
moves forward. 

In closing, TSA has made considerable progress in securing the 
transportation network, especially related to commercial aviation, 
and its efforts should be commended. However, the agency still has 
work to do in some key areas, most especially related to the deploy- 
ment of technologies to screen for explosives at checkpoints and in 
air cargo and more fully defining its regulatory role in security for 
surface transportation modes. 

We are currently reviewing many of these key areas, and will 
continue to report to this committee and others on the results of 
our work. 

This concludes my opening statement. I would be pleased to re- 
spond to any questions. 

[The prepared statement of Ms. Derrick follows:] 

Prepared Statement of Cathleen A. Berrick, Director, Homeland Security 
AND Justice Issues, U.S. Government Accountability Office (GAO) 

Mr. Chairman and Members of the Committee: 

I appreciate the opportunity to participate in today’s hearing to discuss the De- 
partment of Homeland Security’s (DHS) progress and challenges in securing our Na- 
tion’s transportation systems. The Transportation Security Administration (TSA), 
originally established as an agency within the Department of Transportation in 
2001 but now a component within DHS, is charged with securing the transportation 
network while also ensuring the free movement of people and commerce. TSA has 
primary responsibility for security in all modes of transportation and since its incep- 
tion has developed and implemented a variety of programs and procedures to secure 
commercial aviation and surface modes of transportation, including passenger and 
freight rail, mass transit, highways, commercial vehicles, and pipelines. Other DHS 
components, Federal agencies, state and local governments, and the private sector 
also play a role in transportation security. For example, with respect to commercial 
aviation, the U.S. Customs and Border Protection (CBP) has responsibility for con- 
ducting passenger prescreening — in general, the matching of passenger information 
against terrorist watch lists prior to an aircraft’s departure — for international flights 
operating to or from the United States, as well as inspecting inbound air cargo upon 
its arrival in the United States. In addition, responsibility for securing rail and 
other surface modes of transportation is shared among Federal, state, and local gov- 
ernments and the private sector. 

My testimony today will focus on: (1) the progress TSA, and other DHS compo- 
nents have made in securing the Nation’s aviation and surface transportation sys- 
tems, and (2) challenges which have impeded DHS’s (and, as they relate to transpor- 
tation security, TSA) efforts to implement its mission and management functions. 
My comments are based on issued GAO reports and testimonies addressing the se- 
curity of the Nation’s aviation and surface transportation systems, including an Au- 
gust 2007 report that highlights the progress DHS has made in implementing its 
mission and management functions. ^ In this report, we reviewed the extent to which 
DHS has taken actions to achieve performance expectations in each of its mission 
and management areas that we identified from legislation. Homeland Security Pres- 
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idential Directives, and DHS strategic planning documents. Based primarily on our 
past work, we made a determination regarding whether DHS generally achieved or 
generally did not achieve the key elements of each performance expectation. An as- 
sessment of “generally achieved” indicates that DHS has taken sufficient actions to 
satisfy most elements of the expectation; however, an assessment of “generally 
achieved” does not signify that no further action is required of DHS or that func- 
tions covered by the expectation cannot be further improved or enhanced. Con- 
versely, an assessment of “generally not achieved” indicates that DHS has not yet 
taken actions to satisfy most elements of the performance expectation. In deter- 
mining the department’s overall level of progress in achieving performance expecta- 
tions in each of its mission and management areas, we concluded whether the de- 
partment had made limited, modest, moderate, or substantial progress.^ These as- 
sessments of progress do not reflect, nor are they intended to reflect, the extent to 
which actions by DHS and its components have made the Nation more secure. We 
conducted our work in accordance with generally accepted government auditing 
standards. 

Summary 

Within DHS, TSA is the agency with primary responsibility for securing the 
transportation sector and has undertaken a number of initiatives to strengthen the 
security of the Nation’s commercial aviation and surface transportation systems. In 
large part, these efforts have been driven by legislative mandates designed to 
strengthen the security of commercial aviation following the September 11, 2001, 
terrorist attacks. In August 2007, we reported that DHS had made moderate 
progress in securing the aviation and surface transportation networks, but that 
more work remains.® Specifically, of the 24 performance expectations we identified 
for DHS in the area of aviation security, we reported that it has generally achieved 
17 of these expectations and has generally not achieved 7 expectations. With regard 
to the security of surface modes of transportation, we reported that DHS generally 
achieved three performance expectations and has generally not achieved two others. 

DHS, primarily through TSA, has made progress in many areas related to secur- 
ing commercial aviation and surface modes of transportation, and their efforts 
should be commended. Meeting statutory mandates to screen airline passengers and 
100 percent of checked baggage alone was a tremendous challenge. To do this, TSA 
initially hired and deployed a Federal workforce of over 50,000 passenger and 
checked baggage screeners, and installed equipment at the Nation’s more than 400 
commercial airports to provide the capability to screen all checked baggage using 
explosive detection systems, as mandated by law. TSA has since turned its attention 
to, among other things, strengthening passenger prescreening — in general, the 
matching of passenger information against terrorist watch lists prior to an aircraft’s 
departure; more efficiently allocating, deploying, and managing the transportation 
security officer (TSO) — formerly known as screener — workforce; strengthening 
screening procedures; developing and deploying more effective and efficient screen- 
ing technologies; and improving domestic air cargo security. In addition to TSA, 
CBP has also taken steps to strengthen passenger prescreening for passengers on 
international flights operating to or from the United States, as well as inspecting 
inbound air cargo upon its arrival in the United States. DHS’s Science and Tech- 
nology (S&T) Directorate has also taken actions to research and develop aviation se- 
curity technologies. With regard to surface transportation modes, TSA has taken 
steps to develop a strategic approach for securing mass transit, passenger and 
freight rail, commercial vehicles, highways, and pipelines; establish security stand- 
ards for certain transportation modes; and conduct threat, criticality, and vulner- 
ability assessments of surface transportation assets, particularly passenger and 
freight rail. TSA also hired and deployed compliance inspectors and conducted in- 
spections of passenger and freight rail systems. DHS also developed and adminis- 
tered grant programs for various surface transportation modes. 

While these efforts have helped to strengthen the security of the transportation 
network, DHS still faces a number of key challenges that need to be addressed to 
meet expectations set out for them by Congress, the Administration, and the De- 
partment itself. For example, regarding commercial aviation, TSA has faced chal- 
lenges in developing and implementing its passenger prescreening system, known 
as Secure Flight, and has not yet completed development efforts. As planned, this 
program would initially assume from air carriers the responsibility for matching in- 
formation on airline passengers traveling domestically against terrorists watch lists. 
In addition, while TSA has taken actions to enhance perimeter security at airports, 
these actions may not be sufficient to provide for effective security. TSA has also 
begun efforts to evaluate the effectiveness of security-related technologies, such as 
biometric identification systems. However, TSA has not developed a plan for imple- 
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menting such new technologies to meet the security needs of individual airports and 
the commercial airport system as a whole. Further, TSA has not yet deployed check- 
point technologies to address key existing vulnerabilities, and has not yet developed 
and implemented technologies needed to screen air cargo. With regard to surface 
transportation security, while TSA has initiated efforts to develop security stand- 
ards for surface transportation modes, these efforts have been limited to passenger 
and freight rail, and have not addressed commercial vehicle or highway infrastruc- 
ture, including bridges and tunnels. TSA has yet to provide a rationale or expla- 
nation for why standards may not be needed for these modes. Moreover, although 
TSA has made progress in conducting compliance inspections of some surface trans- 
portation systems, inspectors’ roles and missions have not been fully defined. 

A variety of cross-cutting issues have affected DHS’s and, as they relate to trans- 
portation security, TSA’s efforts in implementing its mission and management func- 
tions. These key issues include agency transformation, strategic planning and re- 
sults management, risk management, information sharing, and stakeholder coordi- 
nation. In working toward transforming the department into an effective and effi- 
cient organization, DHS and its components have not always been transparent 
which has affected our ability to perform our oversight responsibilities in a timely 
manner. They have also not always implemented effective strategic planning efforts, 
fully developed performance measures, or put into place structures to help ensure 
that they are managing for results. In addition, DHS and its components can more 
fully adopt and apply a risk management approach in implementing its security 
mission and core management functions.^ They could also better share information 
with Federal agencies, state and local governments and private sector entities, and 
more fully coordinate their activities with key stakeholders. 

Background 

The Aviation and Transportation Security Act (ATSA), enacted in November 2001, 
created TSA and gave it responsibility for securing all modes of transportation.® 
TSA’s aviation security mission includes strengthening the security of airport perim- 
eters and restricted airport areas; hiring and training a screening workforce; 
prescreening passengers against terrorist watch lists; and screening passengers, 
baggage, and cargo at the over 400 commercial airports nation-wide, among other 
responsibilities. While TSA has operational responsibility for physically screening 
passengers and their baggage, TSA exercises regulatory, or oversight, responsibility 
for the security of airports and air cargo. Specifically, airports, air carriers, and 
other entities are required to implement security measures in accordance with TSA- 
issued security requirements, against which TSA evaluates their compliance efforts. 

TSA also oversees air carriers’ efforts to prescreen passengers — in general, the 
matching of passenger information against terrorist watch lists prior to an aircraft’s 
departure — and plans to take over operational responsibility for this function with 
the implementation of its Secure Flight program initially for passengers traveling 
domestically. CBP also has responsibility for prescreening airline passengers on 
international flights departing from and bound for the United States,® while DHS’s 
Science and Technology Directorate is responsible for researching and developing 
technologies to secure the transportation sector. 

TSA shares responsibility for securing surface transportation modes with Federal, 
state, and local governments and the private sector. TSA’s security mission includes 
establishing security standards and conducting assessments and inspections of sur- 
face transportation modes, including passenger and freight rail; mass transit; high- 
ways and commercial vehicles; and pipelines. The Federal Emergency Management 
Agency’s Grant Programs Directorate provides grant funding to surface transpor- 
tation operators and state and local governments, and in conjunction with certain 
grants the National Protection and Programs Directorate conducts risk assessments 
of surface transportation facilities. Within the Department of Transportation (DOT), 
the Federal Transit Administration (FTA) and Federal Railroad Administration 
(FRA) have responsibilities for establishing standards for passenger rail safety and 
security. In addition, public and private sector transportation operators are respon- 
sible for implementing security measures for their systems. For example, the pri- 
mary responsibility for securing passenger rail systems rests with the passenger rail 
operators. Passenger rail operators, which can be public or private entities, are re- 
sponsible for administering and managing passenger rail activities and services, in- 
cluding security. 

DHS Has Made Progress in Seeuring the Nation’s Aviation and Surface Transpor- 
tation Systems, but More Work Remains 

DHS, primarily through the efforts of TSA, has undertaken numerous initiatives 
to stren^hen the security of the Nation’s aviation and surface transportation sys- 
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terns. In large part, these efforts have been guided by legislative mandates designed 
to strengthen the security of commercial aviation following the September 11, 2001 
terrorist attacks. These efforts have also been affected by events external to the de- 
partment, including the alleged August 2006 terrorist plot to blow up commercial 
aircraft bound from London to the United States, and the 2004 Madrid and 2005 
London train bombings. While progress has been made in many areas with respect 
to securing the transportation network, we found that the department can strength- 
en its efforts in some key areas outlined by the Congress, the Administration, and 
the department itself. Specifically, regarding commercial aviation, we reported that 
DHS has generally achieved 17 performance expectations in this area, and has gen- 
erally not achieved 7 expectations. Regarding the security of surface transportation 
modes, we reported that DHS has generally achieved three performance expecta- 
tions and has generally not achieved two others. We identified these performance 
expectations through reviews of key legislation. Homeland Security Presidential Di- 
rectives, and DHS strategic planning documents. 

Aviation Security 

Since its inception, TSA has focused much of its efforts on aviation security and 
has developed and implemented a variety of programs and procedures to secure 
commercial aviation. For example, TSA has undertaken efforts to hire, train and de- 
ploy a screening workforce; and screen passengers, baggage, and cargo. Although 
TSA has taken important actions to strengthen aviation security, the agency has 
faced difficulties in implementing an advanced, government-run passenger 
prescreening program for domestic flights, and in developing and implementing 
technology to screen passengers at security checkpoints and cargo placed on aircraft, 
among other areas. As shown in table 1, we identified 24 performance expectations 
for DHS in the area of aviation security, and found that overall, DHS has made 
moderate progress in meeting these expectations. Specifically, we found that DHS 
has generally achieved 17 performance expectations and has generally not achieved 
7 performance expectations. 


Table 1. — Performance Expectations and Progress Made in Aviation Security 



Assessment 

Performance expectation 

Generally 

achieved 

Generally not No assessment 

achieved made 

Aviation security strategic approach 

Implement a strategic approach for aviation security 
functions 

/ 


Airport perimeter security and access controls 

Establish standards and procedures for effective airport 
perimeter security 


/ 

Establish standards and procedures to effectively control 
access to airport secured areas 


/ 

Establish procedures for implementing biometric 
identifier systems for airport secured areas access control 


/ 

Ensure the screening of airport employees against 
terrorist watch lists 

/ 


Aviation security workforce 

Hire and deploy a federal screening workforce 

/ 


Develop standards for determining aviation security 
staffing at airports 

/ 


Establish standards for training and testing the 
performance of airport screener staff 

/ 


Establish a program and requirements to allow eligible 
airports to use a private screening workforce 

/ 


Train and deploy federal air marshals on high-risk flights 

/ 


Establish standards for training flight and cabin crews 

/ 


Establish a program to allow authorized flight deck 
officers to use firearms to defend against any terrorist or 
criminal acts 

/ 


Passenger prescreening 

Establish policies and procedures to ensure that 
individuals known to pose, or suspected of posing, a risk 
or threat to security are identified and subjected to 
appropriate action 

/ 






18 


Table 1. — Performance Expectations and Progress Made in Aviation Security — Continued 




Assessment 


Performance expectation 

Generally 

achieved 

Generally not 
achieved 

No assessment 
made 

Develop and implement an advanced prescreening system 
to allow DHS to compare domestic passenger information 
to the Selectee List and No Fly List 


/ 


Develop and implement an international passenger 
prescreening process to compare passenger information to 
terrorist watch lists before aircraft departure 


/ 


Checkpoint screening 

Develop and implement processes and procedures for 
physically screening passengers at airport checkpoints 

/ 



Develop and test checkpoint technologies to address 
vulnerabilities 

/ 



Deploy checkpoint technologies to address vulnerabilities 


/ 


Checked Baggage screening 

Deploy explosive detection systems (EDS) and explosive 
trace detection (ETD) systems to screen checked baggage 
for explosives 

/ 



Develop a plan to deploy in-line baggage screening 
equipment at airports 

/ 



Pursue the deplo 5 Tnent and use of in-line baggage 
screening equipment at airports 

/ 



Air cargo security 

Develop a plan for air cargo security 

/ 



Develop and implement procedures to screen air cargo 

/ 



Develop and implement technologies to screen air cargo 


/ 


Total 

17 

7 

0 


Source: GAO analysis. 


Aviation Security Strategic Approach. We concluded that DHS has generally 
achieved this performance expectation. In our past work, we reported that TSA 
identified and implemented a wide range of initiatives to strengthen the security of 
key components of the commercial aviation system. These components are inter- 
connected and each is critical to the overall security of commercial aviation.'^ ® More 
recently, in March 2007, TSA released its National Strategy on Aviation Security 
and six supporting plans that provided more detailed strategic planning guidance 
in the areas of systems security; operational threat response; systems recovery; do- 
main surveillance; and intelligence integration and domestic and international out- 
reach. According to TSA officials, an Interagency Implementation Working Group 
was established under TSA leadership in January 2007 to initiate implementation 
efforts for the 112 actions outlined in the supporting plans. 

Airport Perimeter Security and Access Controls. We concluded that DHS has gen- 
erally achieved one, and has generally not achieved three, of the performance expec- 
tations in this area. For example, TSA has taken action to ensure the screening of 
airport employees against terrorist watch lists by requiring airport operators to com- 
pare applicants’ names against the No Fly and Selectee Lists. However, in June 
2004, we reported that although TSA had begun evaluating commercial airport pe- 
rimeter and access control security through regulatory compliance inspections, cov- 
ert testing of selected access procedures, and vulnerability assessments at selected 
airports, TSA had not determined how the results of these evaluations could be used 
to make improvements to the Nation’s airport system as a whole. We further re- 
ported that although TSA had begun evaluating the controls that limit access into 
secured airport areas, it had not completed actions to ensure that all airport work- 
ers in these areas were vetted prior to being hired and trained.^ More recently, in 
March 2007, the DHS Office of Inspector General, based on the results of its access 
control testing at 14 domestic airports across the Nation, made various rec- 
ommendations to enhance the overall effectiveness of controls that limit access to 
airport secured areas. In March through July 2007, DHS provided us with up- 
dated information on procedures, plans, and other efforts it had implemented to se- 
cure airport perimeters and strengthen access controls, including a description of its 
Aviation Direct Access Screening Program. This program provides for TSOs to ran- 
domly screen airport and airline employees and employees’ property and vehicles as 
they enter the secured areas of airports for the presence of explosives, incendiaries, 
weapons, and other items of interest as well as improper airport identification. How- 
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ever, DHS did not provide us with evidence that these actions provide for effective 
airport perimeter security, nor information on how the actions addressed all rel- 
evant requirements established by law and in our prior recommendations. 

Regarding procedures for implementing biometric identification systems, we re- 
ported that TSA had not developed a plan for implementing new technologies to 
meet the security needs of individual airports and the commercial airport system 
as a whole. In December 2004 and September 2006, we reported on the status of 
the development and testing of the Transportation Worker Identification Credential 
program (TWIC) — DHS’s effort to develop biometric access control systems to 
verify the identity of individuals accessing secure transportation areas. Our 2004 re- 
port identified challenges that TSA faced in developing regulations and a com- 
prehensive plan for managing the program, as well as several factors that caused 
TSA to miss initial deadlines for issuing TWIC cards. In our September 2006 report, 
we identified the challenges that TSA encountered during TWIC program testing, 
and several problems related to contract planning and oversight. Specifically, we re- 
ported that DHS and industry stakeholders faced difficult challenges in ensuring 
that biometric access control technologies will work effectively in the maritime envi- 
ronment where the Transportation Worker Identification Credential program is 
being initially tested. In October 2007, we testified that TSA had made progress in 
implementing the program and addressing our recommendations regarding contract 
planning and oversight and coordination with stakeholders. For example, TSA re- 
ported that it added staff with program and contract management expertise to help 
oversee the contract and developed plans for conducting public outreach and edu- 
cation efforts. However, DHS has not yet determined how and when it will imple- 
ment a biometric identification system for access controls at commercial airports. 
We have initiated ongoing work to further assess DHS’s efforts to establish proce- 
dures for implementing biometric identifier systems for airport secured areas access 
control. 

Aviation Security Workforce. We concluded that DHS has generally achieved all 
7 performance expectations in this area. For example, TSA has hired and deployed 
a Federal screening workforce at over 400 commercial airports nationwide, and has 
developed standards for determining TSO staffing levels at airports. TSA also estab- 
lished numerous programs to train and test the performance of its TSO workforce, 
although we reported that improvements in these efforts can be made. Among other 
efforts, in December 2005, TSA reported completing enhanced explosives detection 
training for over 18,000 TSOs, and increased its use of covert testing to assess 
vulnerabilities of existing screening systems. TSA also established the Screening 
Partnership Program which allows eligible airports to apply to TSA to use a private 
screening workforce. In addition, TSA has trained and deployed Federal air mar- 
shals on high-risk flights; established standards for training flight and cabin crews; 
and established a Federal Flight Deck Officer program to select, train, and allow 
authorized flight deck officers to use firearms to defend against any terrorist or 
criminal acts. Related to flight and cabin crew training, TSA revised its guidance 
and standards to include additional training elements required by law and to im- 
prove the organization and clarity of the training. TSA also increased its efforts to 
measure the performance of its TSO workforce through recertification testing and 
other measures. 

Passenger Prescreening. We reported that DHS has generally achieved one, and 
has not generally achieved two, of the performance expectations in this area. For 
example, TSA established policies and procedures to ensure that individuals known 
to pose, or suspected of posing, a risk or threat to security are identified and sub- 
jected to appropriate action. Specifically, TSA requires that air carriers check all 
passengers against the Selectee List, which identifies individuals that represent a 
higher than normal security risk and therefore require additional security screen- 
ing, and the No Fly List, which identifies individuals who are not allowed to fly.^^ 
However, TSA has faced a number of challenges in developing and implementing 
an advanced prescreening system, known as Secure Flight, which will allow TSA to 
take over the matching of passenger information against the No Fly and Selectee 
lists from air carriers, as required by law.^® In 2006, we reported that TSA had not 
conducted critical activities in accordance with best practices for large-scale informa- 
tion technology programs and had not followed a disciplined life cycle approach in 
developing Secure Flight.^® In March 2007, DHS reported that as a result of its re- 
baselining efforts, more effective government controls were developed to implement 
Secure Flight and that TSA was following a more disciplined development process. 
DHS further reported that it plans to begin parallel operations with the first group 
of domestic air carriers during Fiscal Year 2009 and to take over full responsibility 
for watch list matching in Fiscal Year 2010. We are continuing to assess TSA’s ef- 
forts in developing and implementing the Secure Flight program. We have also re- 
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ported that DHS has not yet implemented enhancements to its passenger 
prescreening process for passengers on international flights departing from and 
bound for the United States. Although CBP recently issued a final rule that will 
require air carriers to provide passenger information to CBP prior to a flight’s de- 
parture so that CBP can compare passenger information to the terrorist watch lists 
before a flight takes off, this requirement is not scheduled to take effect until Feb- 
ruary 2008. In addition, while DHS plans to align its international and domestic 
passenger prescreening programs under TSA, full implementation of an integrated 
system will not occur for several years. 

Checkpoint Screening. We reported that DHS has generally achieved two, and has 
not generally achieved one, of the performance expectations in this area. For exam- 
ple, we reported that TSA has developed processes and procedures for screening 
passengers at security checkpoints and has worked to balance security needs with 
efficiency and customer service considerations. More specifically, in April 2007, we 
reported that modifications to standard operating procedures were proposed based 
on the professional judgment of TSA senior-level officials and program-level staff, 
as well as threat information and the results of covert testing. However, we found 
that TSA’s data collection and analyses could be improved to help TSA determine 
whether proposed procedures that are operationally tested would achieve their in- 
tended purpose. We also reported that DHS and its component agencies have taken 
steps to improve the screening of passengers to address new and emerging threats. 
For example, TSA established two recent initiatives intended to strengthen the pas- 
senger checkpoint screening process: (1) the Screening Passenger by Observation 
Technique program, which is a behavior observation and analysis program designed 
to provide TSA with a nonintrusive means of identifying potentially high-risk indi- 
viduals; and (2) the Travel Document Checker program which replaces current trav- 
el document checkers with TSOs who have access to sensitive security information 
on the threats facing the aviation industry and check for fraudulent documents. 
However, we found that while TSA has developed and tested checkpoint tech- 
nologies to address vulnerabilities that may be exploited by identified threats such 
as improvised explosive devices, it has not yet effectively deployed such technologies. 
In July 2006, TSA reported that it installed 97 explosives trace portal machines — 
which use puffs of air to dislodge and detect trace amounts of explosives on per- 
sons — at 37 airports. However, DHS identified problems with these machines and 
has halted their deployment. TSA is also developing backscatter technology, which 
identifies explosives, plastics and metals, giving them shape and form and allowing 
them to be visually interpreted, However, limited progress has been made in field- 
ing this technology at passenger screening checkpoints. The Implementing Rec- 
ommendations of the 9/11 Commission Act of 2007 (9/11 Commission Act), enacted 
in August 2007, restates and amends a requirement that DHS issue a strategic plan 
for deplo 3 dng explosive detection equipment at airport checkpoints and requires 
DHS to expedite research and development efforts to protect passenger aircraft from 
explosives devices.^® We are currently reviewing DHS and TSA’s efforts to develop, 
test and deploy airport checkpoint technologies.^^ 

Checked Baggage Screening. We concluded that DHS has generally achieved all 
three performance expectations in this area. Specifically, from November 2001 
through June 2006, TSA procured and installed about 1,600 Explosive Detection 
Systems (EDS) and about 7,200 Explosive Trace Detection (ETD) machines to screen 
checked baggage for explosives at over 400 commercial airports.^^ In response to 
mandates to field the equipment quickly and to account for limitations in airport 
design, TSA generally placed this equipment in a stand-alone mode — usually in air- 
port lobbies — to conduct the primary screening of checked baggage for explosives. 
Based in part on our previous recommendations, TSA later developed a plan to inte- 
grate EDS and ETD machines in-line with airport baggage conveyor systems. The 
installation of in-line systems can result in considerable savings to TSA through the 
reduction of TSOs needed to operate the equipment, as well as increased security. 
Despite delays in the widespread deployment of in-line systems due to the high up- 
front capital investment required, TSA is pursuing the installation of these systems 
and is seeking creative financing solutions to fund their deplojnnent. In March 2007, 
DHS reported that it is working with airport and air carrier stakeholders to improve 
checked baggage screening solutions to enhance security and free up lobby space at 
airports. The installation of in-line baggage screening systems continues to be an 
issue of congressional concern. For example, the 9/11 Commission Act reiterates a 
requirement that DHS submit a cost-sharing study along with a plan and schedule 
for implementing provisions of the study, and requires TSA to establish a 
prioritization schedule for airport improvement projects such as the installation of 
in-line baggage screening systems.^^ 
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Air Cargo Security. We reported that TSA has generally achieved two, and has 
not generally achieved one, of the performance expectations in this area. Specifi- 
cally, TSA has developed a strategic plan for domestic air cargo security and has 
taken actions to use risk management principles to guide investment decisions re- 
lated to air cargo bound for the United States from a foreign country, referred to 
as inbound air cargo, but these actions are not yet complete. For example, TSA 
plans to assess inbound air cargo vulnerabilities and critical assets — two crucial ele- 
ments of a risk-based management approach — but has not yet established a method- 
ology or time-frame for how and when these assessments will be completed.^® TSA 
has also developed and implemented procedures to screen domestic and inbound air 
cargo. We reported in October 2005 that TSA had significantly increased the num- 
ber of domestic air cargo inspections conducted of air carrier and indirect air carrier 
compliance with security requirements. However, we also reported that TSA ex- 
empted certain cargo from random inspection because it did not view the exempted 
cargo as posing a significant security risk, although air cargo stakeholders noted 
that such exemptions may create potential security risks and vulnerabilities since 
shippers may know how to package their cargo to avoid inspection.^® In part based 
on a recommendation we made, TSA is evaluating existing exemptions to determine 
whether they pose a security risk, and has removed some exemptions that were pre- 
viously allowed. The 9/11 Commission Act requires, no later than 3 years after its 
enactment, that DHS have a system in place to screen 100 percent of cargo trans- 
ported on passenger aircraft.^'^ Although TSA has taken action to develop plans for 
securing air cargo and establishing and implementing procedures to screen air 
cargo, DHS has not yet developed and implemented screening technologies. DHS is 
pursuing multiple technologies to automate the detection of explosives in the types 
and quantities that would cause catastrophic damage to an aircraft in flight. How- 
ever, TSA acknowledged that full development of these technologies may take 5 to 
7 years. In April 2007, we reported that TSA and DHS’s S&T Directorate were in 
the early stages of evaluating and piloting available aviation security technologies 
to determine their applicability to the domestic air cargo environment. We further 
reported that although TSA anticipates completing its pilot tests by 2008, it has not 
yet established time frames for when it might implement these methods or tech- 
nologies for the inbound air cargo system.^® 

Surface Transportation Security 

Although TSA has devoted the vast majority of its resources to securing commer- 
cial aviation and to meeting related statutory requirements, it has more recently in- 
creased its focus on the security of surface modes of transportation. However, these 
efforts are still largely in the early stages. International events such as the March 
2004 Madrid and July 2005 London train bombings, have, in part, contributed to 
this increased focus. Specifically, TSA and other DHS components have developed 
an approach for securing surface modes of transportation, have taken steps to con- 
duct risk assessments of surface transportation assets; and have administered re- 
lated grant programs. However, TSA has not issued standards for securing all sur- 
face transportation modes, and is still defining what its regulatory role will be. 
Moreover, although TSA has made progress in conducting compliance inspections of 
some surface transportation systems, inspectors’ roles and missions have not been 
fully defined. As shown in table 2, we identified five performance expectations for 
DHS in the area of surface transportation security and found that, overall, DHS pri- 
marily through the efforts of TSA has made moderate progress in meeting these ex- 
pectations. Specifically, we found that DHS has generally achieved three perform- 
ance expectations and has generally not achieved two performance expectations. 
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Table 2. — Performance Expectations and Progress Made in Surface Transportation Security 



Assessment 


Performance expectation 

Generally 

achieved 

Generally not 
achieved 

No assessment 
made 

Develop and adopt a strategic approach for implementing 
surface transportation security functions 

/ 



Conduct threat, criticality, and vulnerability assessments 
of surface transportation assets 

/ 



Issue standards for securing surface transportation modes 


/ 


Conduct compliance inspections for surface transportation 
systems 


/ 


Administer grant programs for surface transportation 
security 

/ 



Total 

3 

2 

0 


Source: GAO analysis. 


Strategic Approach for Implementing Security Functions. We concluded that DHS 
has generally achieved this performance expectation. In May 2007, DHS issued the 
sector-specific plan for transportation systems and supporting annexes for surface 
transportation modes, and reported taking actions to adopt the strategic approach 
outlined by the plan. The Transportation Systems Sector-Specific Plan and its sup- 
porting modal implementation plans and appendixes establish a strategic approach 
for securing surface transportation modes based on the National Infrastructure Pro- 
tection Plan and Executive Order 13416, Strengthening Surface Transportation Se- 
curity. The Transportation Systems Sector-Specific Plan describes the security 
framework that is intended to enable sector stakeholders to make effective and ap- 
propriate risk-based security and resource allocation decisions. During the course of 
our work assessing freight rail, commercial vehicles, and highway infrastructure se- 
curity, we identified that TSA has begun to implement some of the security initia- 
tives outlined in the sector-specific plan and supporting modal plans. While DHS 
has issued a strategy for securing all transportation modes, and has demonstrated 
that it has begun to take actions to implement the goals and objectives outlined in 
the strategy, we have not yet analyzed the overall quality of the plan or supporting 
modal annexes, the extent to which efforts outlined in the plan and annexes have 
been implemented, or the effectiveness of identified security initiatives. In addition, 
we recognize that the acceptance of DHS’s approach by Federal, state and local, and 
private sector stakeholders is crucial to its successful implementation. We also have 
not assessed the extent to which the plan and supporting modal annexes were co- 
ordinated with or adopted by these stakeholders. We will continue to assess DHS’s 
efforts to implement its strategy for securing surface transportation modes as part 
of our ongoing reviews of mass transit, passenger and freight rail, commercial vehi- 
cle, and highway infrastructure security. 

Threat, Criticality and Vulnerability Assessments. We reported that DHS has gen- 
erally achieved this performance expectation. TSA has taken actions to conduct 
threat, criticality, and vulnerability assessments of surface transportation assets, 
particularly for mass transit, passenger rail, and freight rail, but we have not yet 
reviewed the quality of many of these assessments. TSA uses threat assessments 
and information as part of its surface transportation security efforts. For example, 
TSA has conducted threat assessments of mass transit, passenger rail, and freight 
rail transportation modes. TSA has also conducted assessments of the 
vulnerabilities associated with surface transportation assets, to varying degrees, for 
most surface modes of transportation. For freight rail, for example, we found that 
TSA has conducted vulnerability assessments of High Threat Urban Area rail cor- 
ridors where toxic inhalation hazard shipments are transported. However, TSA’s 
vulnerability assessment efforts are still ongoing and in some instances, are in the 
early stages, particularly for commercial vehicles and highway infrastructure. With 
regard to criticality assessments, DHS has conducted such assessments for some 
surface transportation modes. For example, TSA has conducted Corporate Security 
Reviews with 38 state Department of Transportation highway programs. In addi- 
tion, the National Protection and Programs Directorate’s Office of Infrastructure 
Protection conducts highway infrastructure assessments that look at critical high- 
way infrastructure assets. We testified in January 2007 that TSA had reported com- 
pleting an overall threat assessment for mass transit and passenger and freight rail 
modes, and had conducted criticality assessments of nearly 700 passenger rail sta- 
tions. In addition, we further reported that the Grant Programs Directorate devel- 
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oped and implemented a risk assessment tool to help passenger rail operators better 
respond to terrorist attacks and prioritize security measures. We will continue to 
review threat, criticality and vulnerability assessments conducted by TSA and other 
DHS components for surface modes of transportation during our ongoing work as- 
sessing mass transit, passenger and freight rail, highway infrastructure, and com- 
mercial vehicle security.^® 

Issuance of Security Standards. We found that DHS has generally not achieved 
this performance expectation. TSA has taken actions to develop and issue security 
standards for mass transit, passenger rail, and freight rail modes. However, TSA 
did not provide us with evidence of its efforts to develop and issue security stand- 
ards for all surface transportation modes, or provided a rationale or explanation 
why standards may not be needed for other modes. Specifically, TSA has developed 
and issued security directives, security action items — recommended measures for 
passenger rail and mass transit operators to implement in their security programs 
to improve both security and emergency preparedness, and a proposed rule in De- 
cember 2006 on passenger and freight rail security requirements.®® In April 2007, 
DHS reported that TSA uses field activities to assess compliance with security direc- 
tives and implementation of noncompulsory security standards and protective meas- 
ures with the objective of a broad-based enhancement of passenger rail and rail 
transit security. TSA also reported that in its December 2006 notice of proposed 
rulemaking on new security measures for freight rail carriers, it proposed require- 
ments designed to ensure 100 percent positive handoff of toxic inhalation hazard 
shipments that enter high threat urban areas, as well as security protocols for cus- 
tody transfers of toxic inhalation hazard rail cars in high-threat urban areas. TSA 
also reported that its High Threat Urban Area rail corridor assessments supported 
the development of the Recommended Security Action Items for the Rail Transpor- 
tation of Toxic Inhalation Materials issued by DHS and the Department of Trans- 
portation in June 2006. 

Compliance Inspections. We concluded that DHS has generally not achieved this 
performance expectation. TSA has made progress in conducting compliance inspec- 
tions, particularly in hiring and deploying inspectors, but inspectors’ roles and mis- 
sions have not yet been fully defined. TSA officials have reported that the agency 
has hired 100 surface transportation inspectors whose stated mission is to, among 
other duties, monitor and enforce compliance with TSA’s rail security directives. 
However, some mass transit and passenger rail operators have expressed confusion 
and concern about the role of TSA inspectors and the potential that these inspec- 
tions could duplicate other Federal and state rail inspections. In March and April 
2007, with respect to freight rail, TSA reported visiting terminal and railroad yards 
to measure implementation of 7 of 24 DHS recommended security action items for 
the transportation of toxic inhalation hazard materials. Through its Surface Trans- 
portation Security Inspection program, TSA reported that its inspectors conduct in- 
spections of key facilities for rail and transit systems to assess transit systems’ im- 
plementation of core transit security fundamentals and comprehensive security ac- 
tion items; conduct examinations of stakeholder operations, including compliance 
with security directives; identify security gaps; and develop effective practices. Al- 
though TSA has deployed inspectors to conduct compliance inspections and carry 
out other security activities in the mass transit, passenger rail, and freight rail 
modes, TSA did not provide us with evidence that it has conducted compliance in- 
spections for other surface transportation modes or information on whether the de- 
partment believes compliance inspections are needed for other modes. 

The 9/11 Commission Act authorizes funds to be appropriated for TSA to employ 
additional surface transportation inspectors and requires that surface transportation 
inspectors have relevant transportation experience and appropriate security and in- 
spection qualifications. The Act also requires DHS to consult periodically with sur- 
face transportation entities on the inspectors’ duties, responsibilities, authorities, 
and mission. We will continue to assess TSA’s inspection efforts during our ongoing 
work.®® 

Grant Programs. We reported that DHS generally achieved this performance ex- 
pectation. More specifically, DHS has developed and administered grant programs 
for various surface transportation modes. However, some industry stakeholders have 
raised concerns regarding DHS’s current grant process, such as time delays and 
other barriers in the provision of grant funding. We have not yet assessed DHS’s 
provision of grant funding or the extent to which DHS monitors the use of the 
funds. In March 2007, we reported that the DHS Office of Grants and Training, now 
called the Grant Programs Directorate, has used various programs to fund pas- 
senger rail security since 2003.®® Through the Urban Area Security Initiative grant 
program, the Grant Programs Directorate has provided grants to urban areas to 
help enhance their overall security and preparedness level to prevent, respond to. 
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and recover from acts of terrorism. The Grant Programs Directorate used Fiscal 
Year 2005, 2006, and 2007 appropriations to build on the work under way through 
the Urban Area Security Initiative program, and create and administer new pro- 
grams focused specifically on transportation security, including the Transit Security 
Grant Program and the Intercity Passenger Rail Security Grant Program. The 9/ 
11 Commission Act requires DHS to establish grant programs for security improve- 
ments in the public transportation, passenger and freight rail, and over-the-road bus 
modes and requires DHS to take certain actions in implementing the grant pro- 
grams. For example, the Act requires that DHS determine the requirements for 
grant recipients and establish the priorities for which grant funding may be used, 
and it requires that DHS and DOT determine the most effective and efficient way 
to distribute grant funds, authorizing DHS to transfer funds to DOT for the purpose 
of disbursement. We will be assessing grants distributed for mass transit and pas- 
senger rail as part of our ongoing work.^s 

Cross-cutting Issues Have Hindered DHS’s Efforts in Implementing Its 
Mission and Management Functions 

Our work has identified homeland security challenges that cut across DHS’s mis- 
sion and core management functions. These issues have impeded the department’s 
progress since its inception and will continue as DHS moves forward. While it is 
important that DHS continue to work to strengthen each of its mission and core 
management functions, to include transportation security, it is equally important 
that these key issues be addressed from a comprehensive, department-wide perspec- 
tive to help ensure that the department has the structure and processes in place 
to effectively address the threats and vulnerabilities that face the Nation. These 
issues include: (1) transforming and integrating DHS’s management functions; (2) 
establishing baseline performance goals and measures and engaging in effective 
strategic planning efforts; (3) appl3dng and strengthening a risk management ap- 
proach for implementing missions and making resource allocation decisions; (4) 
sharing information with key stakeholders; and (5) coordinating and partnering 
with Federal, state and local, and private sector agencies. We have made numerous 
recommendations to DHS and its components to strengthen these efforts, and the 
department has made progress in implementing some of these recommendations. 

DHS has faced a variety of difficulties in its efforts to transform into a fully func- 
tioning department. We designated DHS’s implementation and transformation as 
high-risk in part because failure to effectively address this challenge could have se- 
rious consequences for our security and economy. DHS continues to face challenges 
in key areas including acquisition, financial, human capital, and information tech- 
nology management. This array of management and programmatic challenges con- 
tinues to limit DHS’ ability to effectively and efficiently carry out its mission. In ad- 
dition, transparency plays an important role in helping to ensure effective and effi- 
cient transformation efforts. We have reported that DHS has not made its manage- 
ment or operational decisions transparent enough so that Congress can be sure it 
is effectively, efficiently, and economically using the billions of dollars in funding it 
receives annually. More specifically, in April 2007, we testified that we have encoun- 
tered access issues during numerous engagements at DHS, including significant 
delays in obtaining requested documents that have affected our ability to do our 
work in a timely manner.^® The Secretary of DHS and the Under Secretary for Man- 
agement have stated their desire to work with us to resolve access issues and to 
provide greater transparency. It will be important for DHS and its components to 
become more transparent and minimize recurring delays in providing access to in- 
formation on its programs and operations so that Congress, GAO, and others can 
independently assess its efforts. 

In addition, DHS has not always implemented effective strategic planning efforts 
and has not yet fully developed performance measures or put into place structures 
to help ensure that the agency is managing for results. We have identified strategic 
planning as one of the critical success factors for new organizations, and reported 
that DHS as well as TSA and other component efforts in this area have been mixed. 
For example, with regards to TSA’s efforts to secure air cargo, we reported that TSA 
completed an Air Cargo Strategic Plan in November 2003 that outlined a threat- 
based risk management approach to securing the Nation’s domestic air cargo sys- 
tem, and that this plan identified strategic objectives and priority actions for en- 
hancing air cargo security based on risk, cost, and deadlines. However, we reported 
that TSA had not developed a similar strategy for addressing the security of in- 
bound air cargo — cargo transported into the United States from foreign countries, 
including how best to partner with CBP and international air cargo stakeholders. 
In another example, we reported that TSA had not yet developed outcome-based 
performance measures for its foreign airport assessment and air carrier inspection 



25 


programs, such as the percentage of security deficiencies that were addressed as a 
result of TSA’s on-site assistance and recommendations, to identify any aspects of 
these programs that may need attention. We recommended that DHS direct TSA 
and CBP to develop a risk-based strategy, including specific goals and objectives, for 
securing air cargo; and develop outcome-based performance measures for its for- 
eign airport assessment and air carrier inspection programs.^® DHS generally con- 
curred with GAO’s recommendations. 

DHS has also not fully adopted and applied a risk management approach in im- 
plementing its mission and core management functions. Risk management has been 
widely supported by the President and Congress as an approach for allocating re- 
sources to the highest priority homeland security investments, and the Secretary of 
Homeland Security and the Assistant Secretary for Transportation Security have 
made it a centerpiece of DHS and TSA policy. Several DHS component agencies and 
TSA have worked toward integrating risk-based decisionmaking into their security 
efforts, but we reported that these efforts can be strengthened. For example, TSA 
has incorporated certain risk management principles into securing air cargo, but 
has not completed assessments of air cargo vulnerabilities or critical assets — two 
crucial elements of a risk-based approach without which TSA may not be able to 
appropriately focus its resources on the most critical security needs. TSA has also 
incorporated risk-based decisionmaking when making modifications to airport check- 
point screening procedures, to include modifying procedures based on intelligence in- 
formation and vulnerabilities identified through covert testing at airport check- 
points. However, in April 2007 we reported that TSA’s analyses that supported 
screening procedural changes could be strengthened. For example, TSA officials 
based their decision to revise the prohibited items list to allow passengers to carry 
small scissors and tools onto aircraft based on their review of threat information — 
which indicated that these items do not pose a high risk to the aviation system — 
so that TSOs could concentrate on higher threat items.®® However, TSA officials did 
not conduct the analysis necessary to help them determine whether this screening 
change would affect TSO’s ability to focus on higher-risk threats.’®’ 

We have further reported that opportunities exist to enhance the effectiveness of 
information sharing among Federal agencies, state and local governments, and pri- 
vate sector entities. In August 2003, we reported that efforts to improve intelligence 
and information sharing need to be strengthened, and in 2005, we designated infor- 
mation sharing for homeland security as high-risk.'’^’ In January 2005, we reported 
that the Nation still lacked an implemented set of government-wide policies and 
processes for sharing terrorism-related information, but DHS has issued a strategy 
on how it will put in place the overall framework, policies, and architecture for shar- 
ing information with all critical partners — actions that we and others have rec- 
ommended.’’® DHS has taken some steps to implement its information sharing re- 
sponsibilities. States and localities are also creating their own information “fusion” 
centers, some with DHS support. With respect to transportation security, the impor- 
tance of information sharing was recently highlighted in the 9/11 Commission Act 
which requires DHS to establish a plan to promote the sharing of transportation se- 
curity information among DHS and Federal, state and local agencies, tribal govern- 
ments, and appropriate private entities.’’® The Act also requires that DHS provide 
timely threat information to carriers and operators that are preparing and submit- 
ting a vulnerability assessment and security plan, including an assessment of the 
most likely methods that could be used by terrorists to exploit weaknesses in their 
security.’’’’ 

In addition to providing Federal leadership with respect to homeland security, 
DHS also plays a large role in coordinating the activities of key stakeholders, but 
has faced challenges in this regard. To secure the nation, DHS must form effective 
and sustained partnerships between legacy component agencies and a range of other 
entities, including other Federal agencies, state and local governments, the private 
and nonprofit sectors, and international partners. We have reported that successful 
partnering and coordination involves collaborating and consulting with stakeholders 
to develop and agree on goals, strategies, and roles to achieve a common purpose; 
identify resource needs; establish a means to operate across agency boundaries, such 
as compatible procedures, measures, data, and systems; and agree upon and docu- 
ment mechanisms to monitor, evaluate, and report to the public on the results of 
joint efforts.’’® We have found that the appropriate homeland security roles and re- 
sponsibilities within and between the levels of government, and with the private 
sector, are evolving and need to be clarified. For example, we reported that opportu- 
nities exists for TSA to work with foreign governments and industry to identify best 
practices for securing passenger rail, and air cargo, and recommended that TSA sys- 
tematically compile and analyze information on practices used abroad to identify 
those that may strengthen the department’s overall security efforts.'’® Further, re- 
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garding efforts to respond to in-flight security threats, which depending on the na- 
ture of the threat could involve more than 15 Federal agencies and agency compo- 
nents, we recommended that DHS and other departments document and share their 
respective coordination and communication strategies and response procedures.'''^ In 
September 2005, we reported that TSA did not effectively involve private sector 
stakeholders in its decisionmaking process for developing security standards for pas- 
senger rail assets.''® We recommended that DHS develop security standards that re- 
flect industry best practices and can be measured, monitored, and enforced by TSA 
rail inspectors and, if appropriate, rail asset owners. DHS agreed with these rec- 
ommendations. In addition, the 9/11 Commission Act includes provisions designed 
to improve coordination with stakeholders. For example, the Act requires DHS and 
the Department of Transportation to develop an annex to the Memorandum of Un- 
derstanding between the two departments governing the specific roles, responsibil- 
ities, resources, and commitments in addressing motor carrier transportation secu- 
rity matters, including the processes the departments will follow to promote commu- 
nications and efficiency, and avoid duplication of effort."'® The Act also requires DHS 
in consultation with the Department of Transportation to establish a program to 
provide appropriate information that DHS has gathered or developed on the per- 
formance, use, and testing of technologies that may be used to enhance surface 
transportation security to surface transportation entities.®" 

Concluding Observations 

The magnitude of DHS’s and more specifically TSA’s responsibilities in securing 
the Nation’s transportation system is significant, and we commend the department 
on the work it has done and is currently doing to secure this network. Nevertheless, 
given the dominant role that TSA plays in securing the homeland, it is critical that 
its programs and initiatives operate as efficiently and effectively as possible. In the 
almost 6 years since its creation, TSA has had to undertake its critical mission 
while also establishing and forming a new agency. At the same time, a variety of 
factors, including threats to and attacks on transportation systems around the 
world, as well as new legislative requirements, have led the agency to reassess its 
priorities and reallocate resources to address key events, and to respond to emerging 
threats. Although TSA has made considerable progress in addressing key aspects of 
commercial aviation security, more work remains in the areas of checkpoint and air 
cargo technology, airport security, and passenger prescreening. Further, although 
TSA has more recently taken actions in a number of areas to help secure surface 
modes of transportation, its efforts are still largely in the early stage, and the na- 
ture of its regulatory role, and relationship with transportation operators, is still 
being defined. As DHS, TSA, and other components move forward, it will be impor- 
tant for the department to work to address the challenges that have affected its op- 
erations thus far, including developing results-oriented goals and measures to assess 
performance; developing and implementing a risk-based approach to guide resource 
decisions; and establishing effective frameworks and mechanisms for sharing infor- 
mation and coordinating with homeland security partners. A well-managed, high- 
performing department is essential to meeting the significant challenge of securing 
the transportation network. As DHS, TSA, and other components continue to evolve, 
implement their programs, and integrate their functions, we will continue to review 
their progress and performance and provide information to Congress and the public 
on these efforts. 

Mr. Chairman this concludes my statement. I would be pleased to answer any 
questions that you or other members of the Committee may have at this time. 
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Senator Dorgan. Ms. Berrick, thank you very much. 

Mr. Hawley, let me ask you a couple of questions, first, about the 
Government Accountability Office assessment. One of the things 
they concluded is that the perimeter security at airports is prob- 
ably not sufficient, and the plans, at this point, may not be suffi- 
cient. All of us who go to airports understand the security inside 
the airport terminal. We go through it. We watch it. We experience 
it. But the security with respect to the perimeter of the airport is 
also very, very important. Tell us your assessment of what you are 
doing in that area, and what the progress has been. 

Mr. Hawley. Yes, sir. The — every airport has its own security 
plan that is tailored for their particular circumstances, and that 
does include perimeter security. So, first of all, there is perimeter 
security in place that is inspected by us and owned and operated 
by the airports themselves. So, the commentary in the report was, 
I believe, in part, based on some pilot tests that were done and the 
criticism was, “Hey, you’ve tested some of this stuff, but it’s not 
widely deployed.” And I would agree that more can be done. And 
it is a partnership that we have with the airports. I think, it is — 
it is important, as you noted, the security everybody sees at the 
front of the airport, it really extends to the perimeter and every- 
thing inside the perimeter. And I think — I view those as equally 
important, because if we just set up a strong perimeter, and don’t 
have security that operates on the inside against, perhaps, the in- 
sider threat, that that’s not a good thing. So, we need to have all 
of that covered, and that is what we’re doing. 
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Senator Dorgan. Mr. Hawley, let me ask about the issue of an 
award made to BearingPoint in 2004, which you’re familiar with, 
to do a pilot project to provide transportation security credentials 
to 75,000 workers at various ports, airports, train stations, trans- 
portation sites. My understanding is that, by mid-2006, some $26 
million had been spent, and there were only 4,000 workers in this 
whole matrix that had cards. Then, in 2007, TSA awarded a $70 
million contract to Lockheed Martin to provide credentials to 
850,000 individuals. Deployment had been expected in March of 
this year, but apparently a botched transfer of data from 
BearingPoint to Lockheed further delayed that. 

I ask this question because I was involved, some while ago, in 
the issue of recruiting for screeners at airports, and we found out 
that the company that did that had actually had recruiting sessions 
at the Waldorf Astoria, in New York, at very expensive ski resorts, 
and so on. And that company, of course, was taken to task for that, 
but I think there was pretty sloppy oversight of that company. Tell 
me about this circumstance, where we provide a contract to 
BearingPoint, didn’t get the performance; now we provide a con- 
tract to Lockheed Martin, they couldn’t transfer the data. Tell me 
about what’s happening. And the reason I ask 

Mr. Hawley. Well 

Senator Dorgan. — the question, is because credentialing people 
at these critical sites — airports, train stations, and so on — is really 
important. You’ve got to know who’s there and who has access. 

Mr. Hawley. Right. And the problems you mentioned have been 
solved, and it’s — we refer to is as the TWIG program. Transpor- 
tation Worker Identification Credential. And it’s rolling out — in 
fact, today is the first day they’re actually physically enrolling 
transportation workers at the Port of Wilmington, Delaware. And 
the issue there at the transition was essentially a technological 
issue of migrating systems so that they would interact with our 
other vetting systems for aviation and the other modes. And 
there — we were concerned that, if there was a problem with that 
integration, it would not only slow down the TWIG part, but would 
hurt the rest of our vetting. So, we took that slowly and carefully, 
but it is now resolved. That’s — that was a lot of the concern that 
everybody had, frankly, this spring. But now Lockheed Martin is 
in place, those issues are behind us, and cards are being issued as 
we speak. 

Senator Dorgan. And you feel there is ample and proper over- 
sight by the agency? 

Mr. Hawley. There is. The security measures — and this also is — 
a GAO report was critical of a lot of the pieces behind the TWIG 
program; and those, we did address, have addressed, and I believe 
they are resolved, at this point. 

Senator Dorgan. The GAO report was critical of the oversight 
and management. 

Ms. Berrick, what is your assessment, having looked at all of 
this, with respect to rail security? Has rail security been given 
short shrift? You know, all of us understand what happens when 
you get on an airplane. And we also understand how little of that 
occurs when you try to get on Amtrak or a passenger train. Has 
rail security been given short shrift here? 
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Ms. Berrick. I think, compared to all surface modes of transpor- 
tation, TSA and DHS have placed more of a focus on passenger rail 
and mass transit, because, based on intelligence information, they 
view that as a risk-based decision, focusing on the area — the areas 
of surface transportation modes where they should be spending 
their time. So, they’ve issued security directives for passenger rail, 
they’ve issued security action items. They’ve hired inspectors to fol- 
low up on these requirements and work with rail operators to 
strengthen security. We identified areas where they could do addi- 
tional work. For example, we reported that inspectors’ roles haven’t 
been fully defined. Rail operators aren’t completely certain whether 
or not the security directives are mandatory or voluntary. There 
can be increased communication between TSA and the rail opera- 
tors. But we found that they have put more and more focus on it, 
and they’re continuing to do that. 

Senator Dorgan. Ms. Berrick, thank you very much. 

I indicated, at the start, before some members were here, that 
Senator Inouye is not able to be at the hearing, and Senator Ste- 
vens will chair in his absence. 

Senator Stevens, did you wish to go in order of arrival? 

Senator Stevens. Yes. The Senator 

Senator Dorgan. All right. 

Senator Stevens. — was ahead of me. 

Senator Dorgan. All right. Senator Smith, McCaskill, Stevens, 
Snowe, and Klobuchar would be the order of arrival. 

Senator Stevens. Right, OK. Thanks. 

Senator Dorgan. And I have to be over on the floor of the Sen- 
ate, so Senator Stevens will recognize those Senators. 

Senator Stevens. Thank you. 

Senator Dorgan. Senator Smith? 

Senator Stevens [presiding]. Senator Smith? 

Thank you. 

Senator Smith. Thank you. Senator Stevens — Senator Dorgan, as 
well. 

Mr. Hawley, in my opening statement I referred to the testimony 
of the Government Accountability Office that quotes, “While TSA 
initiated efforts to develop security standards for surface transpor- 
tation modes, these efforts have been limited to passenger and 
freight rail, and have not addressed commercial vehicles or high- 
way infrastructure, including bridges and tunnels.” How do you re- 
spond to that statement? Is that an accurate statement, in your 
view? 

Mr. Hawley. Well, on the highway side, we’ve done — we’ve 
worked with the individual states and the trucking community, ba- 
sically, and are — have started with the hazardous materials driv- 
ers, those who have the hazardous materials endorsement, and we 
do full checks on those people. So, that is in place today, and it 
really is adding layers as we go. I think the bridges and tunnels 
would be a very high priority, and that is something that we work 
on with the states and also other elements of DHS. And the ques- 
tion of exactly what the regulatory scheme is, beyond what we have 
in place for hazardous materials, would be the next step, and we 
are looking at the vetting — basically, watch list checking against 
the CDL holders, those who have commercial driver’s license. We 
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also have a “See Something, Say Something” program that is good 
for reporting of suspicious incidents. 

Senator Smith. I understand from your reports, that roughly 
three-quarters of your budget goes toward aviation. That must be 
in response to the threat levels that you hear, or is it for some 
other reason that that’s the preponderance? 

Mr. Hawley. It is for another reason. And the reason is that the 
economic model that we use for aviation is — the Federal Govern- 
ment actually does the operation of it; whereas, in the other modes 
it’s done by State and local and private sector. It’s a shared respon- 
sibility everywhere, but the bulk of our budget comes from paying 
the officers who work in the airports. 

Senator Smith. And do you see that shifting, over time, more to 
surface transportation? 

Mr. Hawley. No. No. I think that that’s the economic model 

Senator Smith. It’s just a function of the State and Federal re- 
sponsibilities. 

Mr. Hawley. Correct. 

Senator Smith. OK. I’m curious, in 2004-2005 we saw terrorists 
attack train systems in Madrid and London, England, and I won- 
der, if we have similar threats, why our focus hasn’t been more on 
the rail system. 

Mr. Hawley. Well, I — the focus is on the rail system more than, 
perhaps, it appears. And you will see that in the transit commu- 
nities with our pairing with local law enforcement and providing 
them the technology. And we do VIPR teams with them. But, most 
importantly, for both rail and transit rail, is the employee training, 
and we’ve seen a major shift to something that — in working with 
the Congress — what we’ve done is shift the priority of the grant 
money to front-line training, which we think has an immediate ap- 
plication to stop terrorist attacks. And so, that’s on the passenger 
rail side. On the freight rail side, we have an agreement that’s in 
place that’s already reduced the amount of toxic material that is 
standing unattended in high-threat urban areas. And we’re doing 
a regulation now to back that up, but we’ve already seen the im- 
provement. 

Senator Smith. One final question, Mr. Chairman. 

Mr. Hawley, it’s been interesting to follow TSA since 9/11, and 
the different kinds of technologies employed, and it seems to be 
getting better and better and more efficient all the time. And I’m 
wondering, as you look into the future, what is the best technology 
for providing security to the American people that you see? 

Mr. Hawley. The best technology is the human brain, because 
we’re fighting an enemy who, when we put in place something that 
is rigid, will figure a way to go around it. So, we always have to 
have the human element to not allow them — they have unlimited 
time to plan — not allow them the ability to plan a perfect attack. 
But, I think, the technology we’re testing now in Phoenix to detect 
explosives on the body, I think that is — that has been a concern of 
all of ours, and that’s now getting in place; and the privacy aspects 
of that are critical, and looking forward to the public debate as we 
roll that out. 

I think the explosive detection for baggage is moving along pretty 
well, but the main — the big bonus will be when we have stand-off 
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explosive detection, to be able to — as people go through a lobby 
area, be able to detect it without forcing them to go through a bot- 
tleneck. 

Senator Smith. Very good. Thank you. 

Senator Stevens. Senator McCaskill? 

STATEMENT OF HON. CLAIRE McCASKILL, 

U.S. SENATOR FROM MISSOURI 

Senator McCaskill. Thank you, Mr. Chairman. 

Mr. Hawley, in December of 2001, according to the IG at the De- 
partment of Transportation, a senior aircraft technician at a for- 
eign repair station in Singapore was found to be a member of the 
terrorist organization al Qaeda. Based on interviews with the re- 
pair station personnel, the IG determined that this technician had 
photographed U.S. aircraft as potential targets for a terrorist at- 
tack. That was in December of 2001. That was one of several dif- 
ferent facts that the IG revealed in a scathing report concerning 
foreign repair stations and security issues. There are foreign repair 
stations located at a minimum of five countries that have been 
identified by the U.S. State Department as terrorist safe havens. 

Now, as a result of this report. Congress took it very seriously 
and passed a law, and said, in that law, by 2004, you had to pro- 
mulgate a rule concerning foreign repair stations and the auditing 
and inspection of foreign repair stations for the safety of the flying 
public. By 2000 — 18 months later, you were supposed to be audit- 
ing all these foreign repair stations. 

I have here a draft of the rule that was supposed to be finished 
in 2004. This draft was finished in 2005. And nothing has hap- 
pened. 

Now, I know, if we determined there was a member of al Qaeda 
that was traveling on one of our airplanes by one of the systems 
we have in place — there would be an outcry, i^at I can’t figure out 
is why there is no sense of urgency about foreign repair stations, 
especially in light of the fact that we have, now, noncertified for- 
eign repair stations that are doing significant work. And, by the 
way, all of these airplanes have the right to leave these foreign re- 
pair stations, some which are in countries we’ve designated as ter- 
rorist safe havens, and go directly to an airport and pick up pas- 
sengers. There’s no requirement they come back to be looked at 
again by people here in the United States or by any of our systems 
here in the IJnited States. I think it is a disaster waiting to hap- 
pen, and I would like an explanation as to why your agency has 
been unable to promulgate a rule that Congress said had to be 
done by 2004, and this is 2007. 

Mr. Hawley. I can speak to what has happened recently. I was 
not with TSA at that time, and I, frankly, don’t have any back- 
ground into what happened there. I think — I know what’s hap- 
pening now, which is, in the 9/11 bill, there is a requirement for 
us to put out a rulemaking, and then follow it up in 6 months with 
inspections. And we intend to do that. The regulation is working 
its way through the process, and that will kick out when it goes 
through the review process. And I can’t exactly predict — except 
that it is being worked on. And as far as the current vulnerability, 
that is something that we look at, with what happens in other 
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countries and people’s access to the transportation infrastructure, 
including aviation. And, as you know, there are layers that are in 
place, so it is not completely uncovered. It’s part of the layer and 
risk management that we look at. And we take the — clearly, the re- 
quirement put forth by the Congress to make this happen, and we 
will make this happen. 

Senator McCaskill. Well, there is a rule that was drafted, and 
a former employee got it to us, and nothing’s happened with it. 
And, I gotta tell ya, as you well know, right now there is no rule 
even requiring background checks. When you’ve got perimeter secu- 
rity issues at many of these foreign repair stations, certified and 
noncertified, I would hate to have happen what could happen, and 
that is, with all the effort and time we’re taking checking every- 
one’s suitcases and wanding everyone’s knee replacements, that 
we’ve got terrorists working under the hoods of these airplanes in 
foreign countries, and we are basically twiddling our thumbs since 
the Congress mandated this, back in 2003. I just hope that you 
leave this hearing with a sense of urgency about the issue of for- 
eign repair stations. 

I’ve got some other questions about airport screenings I’d like to 
address if we get a chance for another around of questions. 

Thank you, Mr. Chairman. 

Senator Stevens. Thank you. I’m sure there will be another 
round. Senator. 

Senator Snowe? 

STATEMENT OF HON. OLYMPIA J. SNOWE, 

U.S. SENATOR FROM MAINE 

Senator Snowe. Thank you, Mr. Chairman. 

Mr. Hawley, I’d like to follow up on the issue of commercial air- 
line cargo and what is the status. I noted, in the GAO report, that 
one of the significant failures, at this point, is the inability to de- 
velop and implement the technologies necessary. For too long, this 
has — cargo loophole has been insufficiently addressed by the De- 
partment, and, despite the ramping-up of efforts with the passage 
of the 9/11 Commission recommendations by this committee last 
year, and by the Congress, clearly this is a major issue and flaw 
in the process. And I would like to hear what you intend to provide 
for an update on this, and why we can’t close the gap. I know we’ve 
got the Known Shipper Program, but, again, that does not require 
extensive screening of the cargo under the Known Shipper Pro- 
gram, similar to what, you know, individuals, you know, have to 
comply with when they’re going through screening at the airports. 
And certainly this provides another gaping hole in our system. 
And, frankly, it’s gone on for far too long. 

Mr. Hawley. The report that you mention was a snapshot in 
time, looking backwards over a year ago. And we’ve been — Sec- 
retary Chertofif has a very high priority of mine, as well as — I have 
my own priority to do this — to meet those issues. And we’ve done 
exactly that. The — there was a category of freight called “exempted 
freight,” and we’ve gone in and required various security measures 
on that. We’ve added the equivalent of 100 canine teams to focus 
on the cargo that previously had not been inspected. So, that’s — 
that is now happening everywhere. 
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At the 250 smallest airports, they get exactly the same screening 
as we give for checked baggage. And the 9/11 bill that we’re talking 
about here puts in place — I — and I would really compliment this 
committee to work with us on practical solutions, a step up from 
where we are, and we intend to meet the requirements under that 
deadline. 

We also have the canine — 170 canine teams were put in through 
the recent appropriation supplemental for air cargo. So, we’ve — we 
have been driven on the issue of closing any vulnerabilities that 
may have existed on air cargo, and I think the picture today is sig- 
nificantly different than it was when that report was written — sig- 
nificantly better. 

Senator Snowe. So, what is the percentage of air cargo that is 
now currently screened? And is it done on the — is it conducted 
under the Known Shipper Program? And is that cargo actually 
screened? 

Mr. Hawley. The — I know exactly what you’re asking, and, in 
the new law, it says, explicitly, “You can’t use the Known Shipper 
Program to meet the requirements that we’re saying.” It says, “You 
get 18 months to get 50 percent, and then, at the end of 3 years, 
you’ve got to be 100 percent, and you can’t count Known Shipper.” 
So, it’s very clear on what is required. It defines “screening,” it de- 
fines what the system is required to do, the timeline. And I think 
it is workable. Arid, again, I would thank the Committee for work- 
ing with us to get something that is workable and we will do it. 

Senator Snowe. I know the Inspector General report in August 
indicated that there were a dearth of screeners for cargo. So, what 
is the ratio of cargo screeners to airports? 

Mr. Hawley. Well, we don’t assign our officers to the cargo side. 
The — where we do that is with either the law enforcement officer 
paired with a canine, our security inspectors — and we’ve got about 
1,000 — and then the airlines themselves have to do screening. 

Senator Snowe. And so — but what is — so, what’s the actual num- 
ber, though? I mean, isn’t that something that you ought to be con- 
cerned about? 

Mr. Hawley. Well, we use our transportation security officers for 
screening people, and we do have them go in the back of the air- 
port, including cargo, to do checks on the people working there. But 
the actual screening is not done by those officers, it’s done either 
by the canine teams, who are not TSOs, our inspectors, or airline 
personnel. 

Senator Snowe. Ms. Berrick, can you comment on Mr. Hawley’s 
response to cargo screening? Because this is a critical issue, and a 
major gap in our system that obviously needs to be rectified. And 
what would you — in response to his — the answer with respect to 
the timeline for achieving it? 

Ms. Berrick. Sure. GAO actually looked at two aspects of air 
cargo. One was cargo domestically transported to the United 
States, and we also looked at cargo from foreign countries coming 
into the United States. One point we made was that, for domestic 
air cargo security, TSA does have a lot of actions underway and are 
moving in the right direction to strengthen cargo security. We had 
a number of recommendations and things they can be doing, more. 



35 


In terms of inbound air cargo coming into the United States, 
that’s much more in the early stages, in terms of both TSA and 
CBP ensuring the security of this cargo. 

But, I think, probably the most important points we made in our 
report was that foreign countries that also secure their cargo were 
using some measures that potentially could be used in the United 
States. For example, some countries have a more robust program 
to verify indirect air carriers, freight forwarders who consolidate 
cargo. And they over — they’re pretty rigorous in their oversight 
over these entities, which isn’t currently happening in the United 
States. Also, some foreign countries have extra security procedures 
at airports where cargo is stored, or they have guards monitoring 
the cargo. People have to be physically screened if they go into the 
facility. Here in the United States, the cargo is on the airport 
grounds, which has its own security program, but it doesn’t have 
that extra layer of security. 

Also, some other countries are using technologies to screen 
cargo — radiation detection monitors. They’re also using large X-ray 
machines to screen a portion of air cargo. And other countries are 
also, similar to TSA, working to increase the amount of cargo that 
they screen. And, in fact, some view the United States — the risk of 
shipping cargo to the United States as higher, so some countries 
actually do additional security screening for cargo that’s bound for 
the United States. 

But I think that the lessons from our report — a good lesson is the 
fact that other countries do have mechanisms in place to strength- 
en cargo screening, and some of these, potentially, could be consid- 
ered and may be applied in the United States. 

Senator Snowe. Thank you. 

Thank you, Mr. Chairman. 

Senator Stevens. Thank you. 

Senator Klobuchar? 

STATEMENT OF HON. AMY KLOBUCHAR, 

U.S. SENATOR FROM MINNESOTA 

Senator Klobuchar. Thank you. Senator. Thank you. 

Five years ago, the 9/11 Commission provided Congress and the 
American people with a clear assessment of the need to reform our 
approaches for security. And I believe that TSA was created in 
2001 — is that correct? — has done some good work. But I think of, 
the assessment that you received in 2005, when ten members of 
the 9/11 Commission issued a report card that found that the TSA 
was either failing or providing unsatisfactory progress in a number 
of key areas. And my questions are really to follow up on Senator 
Snowe, first, about the cargo screening, and if you think that the 
100 percent goal is possible to meet. And I want to clear the record 
that you did say we would meet the goals of the 9/11 Commission 
recommendation bill — I think that’s 50 percent of all air cargo car- 
ried on commercial airplanes screened within 18 months, all com- 
mercial air cargo screened within 3 years. Is that correct? 

Mr. Hawley. That is correct. Yes, ma’am. 

Senator Klobuchar. And so, do you think it’s possible to get to 
100 percent? 

Mr. Hawley. Yes. 
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Senator Klobuchar. How do we do that? 

Mr. Hawley. Yes. And I think Ms. Derrick, in her answer to Sen- 
ator Snowe, outlined a lot of the tools that we’re going to use. And 
we have followed, very closely, the work with our international 
partners, and some of those programs are, we feel, capable of being 
implemented here, and some of the technology that Ms. Derrick 
mentioned, that we’re not currently using, could be configured to 
use in cargo. So, we are working through that right now, and I — 
this committee was instrumental in making it such that we are, in 
fact, going to be able to do it, and get the real screening that 
doesn’t rely on the so-called Known Shipper Program, that is real 
screening in the way we all know we mean it. And I think the 
other important piece is that — with our international partners — 
that, as we align with them — we are in frequent conversation with 
our partners around the world to have a unified security measure, 
that, as we meet those deadlines, it would be a similar security 
blanket for our trading partners, as well. 

Senator Klobuchar. OK. Thank you. 

Ms. Derrick, I had some questions about the GAO report on the 
passenger screening. I know that the GAO found the lack of a 
standardized process for all airlines when they look at cleared lists 
for passengers, and that they’ve contributed to delays — could you 
talk a little bit about that and what those problems are? I know 
the Secure Flight Program can’t become operational until you cer- 
tify that the TSA has satisfied the requirements. What are the bar- 
riers to getting that satisfied and how do we fix this? 

Ms. Derrick. Sure. In terms of the current process, the 
prescreening of passengers — the way it works is, air carriers match 
passenger information against the terrorist watch list that TSA 
supplies to them to determine if there are any high-risk passengers 
that shouldn’t be allowed on a flight. The problem with the current 
process is that air carriers all do it a little bit differently. Some 
may have really rigorous methods for doing name-matching, others 
may use a manual process. So, theoretically, you could be on one 
flight with one carrier and not be a match, get on the plane with 
no problem; you could be with another carrier, and be a match, be- 
cause your name sounds similar to someone that’s on the terrorist 
watch list. So, with the development of Secure Flight, if Secure 
Flight operates as intended, it should correct that problem, because 
the government will be taking over the function, they’ll be doing 
the name-matching consistently, they’ll be using a more robust 
methodology to match passenger information. And it also provides 
a security benefit, in that the government won’t have to provide the 
terrorist watch list to the private sector, because right now, again, 
the carriers are receiving this — some carriers contract out with for- 
eign countries, and the foreign countries are actually doing the 
name-matching. So, obviously, there are concerns there. 

Secure Flight, in the past we’ve reported that the reason the pro- 
gram has had problems — again, this is in the past — was that TSA 
wasn’t following a disciplined development process. There is — TSA 
even has procedures on how you go about developing systems like 
this. And, in the need that they felt to implement the program 
quickly, some of those requirements were bypassed. Since that 
time, TSA has stood down and rebaselined their program con- 
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sistent with GAO’s recommendations. They’ve taken a lot of posi- 
tive action to help ensure Secure Flight’s success, including fol- 
lowing more disciplined processes, bringing in people with the ap- 
propriate skills. 

We’re still looking at Secure Flight. And, in fact, we’re going to 
be reporting, in response to the 9/11 Act, in January of 2008 on 
what our assessment is of TSA’s progress. Right now it’s too early 
for us to conclude whether 

Senator Klobuchar. Do you know how long it will take to get 
it certified, and what the timetable is? 

Ms. Derrick. Well, one of the things we’ve been asked in the 9/ 
11 mandate was to look at TSA’s time-frame for fielding the pro- 
gram to determine whether or not we think it’s reasonable. So, 
that’s one of the things we’ll report in January. We don’t have an 
answer yet on that. 

Senator Klobuchar. Mr. Hawley, do you want to add anything? 

Mr. Hawley. I think that’s a good summation. And I think we 
now have got the program in good shape. The rule is out. We’ve 
had the public comment. We’re going to be closing off public com- 
ment and writing the final rule, and then the various certifications. 
We’re about a third of the way through from our end, of that work. 
And it will come down to the funding level for FY08 as to exactly 
how fast the program progresses. 

Senator Klobuchar. Ms. Derrick, back to the issues you raised 
about the privacy concerns. So, the actual names of the people on 
this list are going to foreign governments, or what’s happening? 

Ms. Derrick. In some cases, under the current process, air car- 
riers who do, again, the matching, they’ll contract out and have a 
contractor do the matching. In some cases, they have done that 
with companies located in foreign countries. So, that has happened. 
The majority of carriers don’t do that, but some have. 

Senator Klobuchar. Should the Congress take seriously the re- 
ports that airlines have supplied DHS with substantial information 
on passengers without their knowing it, some of these privacy con- 
cerns that have been raised? 

Ms. Derrick. We haven’t looked at privacy with respect to the 
current process. We are looking at that as a part of Secure Flight. 

In the past, we have reported that there were some problems, in 
terms of TSA reporting how they’re using passenger data during 
testing of the Secure Flight program. Since that time, in our work 
with TSA, we’ve found that they’ve built in more privacy safe- 
guards into the program — again, that are positive. The recent pri- 
vacy notice that they’ve implemented has contained information 
that, in fact, GAO recommended. So, we think they’re moving in 
the right direction. Dut, again, in terms of Secure Flight protecting 
privacy, it’s too early for us, at this point to draw any conclusions, 
but we will be talking about that in our January report. 

Senator Klobuchar. Thank you. 

Senator Stevens. Senator Thune? 

STATEMENT OF HON. JOHN THUNE, 

U.S. SENATOR FROM SOUTH DAKOTA 

Senator Thune. Thank you, Mr. Chairman. Thank you for hold- 
ing the hearing. 



38 


And thank you, our panelists, for being here today and providing 
some testimony in what is very valuable input on TSA’s progress 
toward carrying out the important piece of legislation that was 
passed, the 9/11 Commission Act of 2007. 

We’ve got about 9 billion, I think, passengers each year that use 
mass transit, about a 2 million a day that fly on the airlines, and 
so, obviously, we have a lot of citizens who depend and — upon ac- 
cessible, affordable, and efficient travel, both for commerce and lei- 
sure, and that — the same things that, you know, we’re concerned 
about, in terms of our vulnerability to terrorist attacks, our — those 
things, even though we’ve got safeguards and everything in place, 
continue to be a concern to a lot of people who travel. And, obvi- 
ously, we want to make — take every precaution, but try and do it 
in a way that provides as much ease and convenience for people 
that are traveling as possible. 

One question I have with regard to that, Mr. Hawley, is, can the 
TSA implement the provisions of the 9/11 Act, while, at the same 
time, making the airline passenger prescreening process more effi- 
cient and passenger friendly? 

Mr. Hawley. I think that the parts in the 9/11 Commission im- 
plementation bill that relate to passenger screening will put us in 
the right direction. In other words, the Secure Flight, the watch list 
matching, those programs, I think, will have an immediate — when 
Secure Flight is up, will have an immediate, positive, enormous ef- 
fect by eliminating the people who are not on the watch list, who 
are somehow told that they are, or think that they are; and, when 
that issue goes away, I think it will elevate the spirit of the trav- 
eling public, as well as protect the security of the list. So, we’ve got 
some technology that we need to roll out, that we have already 
started rolling out for passenger checkpoints, and so, all of those 
things are going to go toward decluttering the checkpoint, calming 
the environment down so it’s not as much of a crush, and that 
gives us better security, it also gives a better experience. 

Senator Thune. How close are we to using some of the biometric 
identifiers? You talked about technology. How far out is that? And 
are these short-term or long-term objectives for TSA? 

Mr. Hawley. The ones I mentioned are short-term, immediate- 
term, and they’re happening now. 

Senator Thune. Right. 

Mr. Hawley. On the biometrics, it’s — one of the criticisms in the 
GAO report is that we haven’t deployed the biometrics in the air- 
port environment. So, that clearly is the next piece for us. We’ve 
got the — in the port environment, the TWIG card is being — enroll- 
ments are going on now, so that is the sophisticated biometric. The 
standards are set, and we’re working with the airport community 
to get the — the difficulty is the interoperable card so that, as re- 
quired in the 9/11 bill, when we’re talking about flight crews, that 
there be interoperability from airport to airport. So, it’s much easi- 
er to do one airport, but a — ^but it’s much more complicated to have 
the one issued here work at the other. So, that’s the problem that 
we’re working through. But I think you put your finger on it, 
that’s — that is a critical next step in aviation security. 
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Senator Thune. What — how — and what — when you say “short- 
term,” what — “long-term time frame,” what is the time-frame on 
that, would you say? 

Mr. Hawley. The biometrics have been much more difficult to 
implement than any of us expected. And TWIG, as everybody 
knows, has taken longer than any of us would have liked. And it 
come — it is the most sophisticated interoperable biometric system 
in the world. And so, expanding that into the aviation environment 
is not trivial, but I think we’ve solved most of the problems. We 
now have to figure out, “OK, how do we — how do we actually im- 
plement it? And how do we make the back end connect to our 
watch-list-checking in a way that allows us to process it all smooth- 
ly?” 

Senator Thune. Is the interoperability that you referred to, and 
being able to integrate this on all the airports around the country, 
the limitation on that, is that a technology limitation or a funding 
limitation? Is it a — is it a matter of not having enough money to 
make that 

Mr. Hawley. It’s first the — it’s first the technology and the oper- 
ational integration from the point — it’s not — nothing needs to be in- 
vented, but fitting the pieces together is the difficult part, and then 
the money — we’ll have a big debate about the money. But I think 
all of us agree it has to happen, and the airports have been a great 
partner in it, and we’ll work that out. 

Senator Thune. Thanks. 

Ms. Berrick, some of the critics of the U.S. aviation security pol- 
icy argue that there has been too much emphasis given to previous 
attack scenarios, and — for example, hijackings, luggage bombs, 
those sorts of things. Do you agree with that assessment? 

Ms. Berrick. I 

Senator Thune. And why, or why not, I guess is 

Ms. Berrick. Yes. It — well, in most of our work we look at to 
what extent TSA is using threat information — current threat infor- 
mation to drive their decisions. And generally we’re finding that 
they do do that. And, of course, they consider past threats and try 
to mitigate those. They also look forward: What are the current 
threats, and where should we be moving, you know, in the next 5 
to 10 years? So, generally, we’ve seen that they’ve done that. Re- 
lated to making risk-based decisions, the area where we’ve prob- 
ably identified they could do more work is related to doing vulner- 
ability assessments on how vulnerable are we against these various 
threats? But they’ve done vulnerability assessments in a lot of dif- 
ferent areas. We’ve reported that we think we can — they can 
strengthen their efforts to look at how vulnerable we are. But, pret- 
ty consistently, in almost all of our work, we’ve found that TSA has 
incorporated threat information — and, again, not just past threat 
information, but looking forward — to help drive their decisions and 
priorities. 

Senator Thune. Thank you, Mr. Chairman. 

Senator Stevens. Thank you. 

Senator Lautenberg? 
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STATEMENT OF HON. FRANK R. LAUTENBERG, 

U.S. SENATOR FROM NEW JERSEY 

Senator Lautenberg. Yes, Mr. Chairman. Thanks very much for 
conducting this hearing. We have lots of questions about the inabil- 
ity of — a major government agency unable to meet a deadline. And 
it’s a consistent problem, it seems to me, especially with DHS. I 
know there are lots of loyal, hardworking people there who want 
to get the job done right, they know that it’s an enormous responsi- 
bility. But yet, a deadline for dealing with the security of bridges 
and tunnels in New York/New Jersey region. There is an amend- 
ment that I authored, the Fiscal Year 2007 Homeland Security ap- 
propriations legislation, and they were supposed to report by 
March 1, 2007. And I ask you, Mr. Hawley, what’s the status of 
that report? 

Mr. Hawley. The report is complete, and I believe it is under- 
going — it’s a classified report, and it is undergoing clearance. But 
I should also say that anything developed from that report, we’ve 
discussed with the appropriate officials in the appropriate regions, 
so that there — so that we’re not holding back information that 
would allow them to do security improvements. It’s the — it’s basi- 
cally going through the clearance process. 

Senator Lautenberg. Well, this is way past April 2007, in case 
anybody didn’t notice the weather change out there. 

When will TSA, Mr. Hawley, begin enrolling workers at the Port 
of New York and New Jersey in the TWIG program? 

Mr. Hawley. It will be soon. I’m trying to figure out how to give 
you an answer without making it one 

Senator Lautenberg. Me, too. 

Mr. Hawley. — that we can’t meet. I think it’s going to be in the 
next big series. Obviously, that is the — that is the big port commu- 
nity on the East Coast, and there are a couple of the smaller ones 
first to get the system burned in, but it will be in the holiday-sea- 
son/January time-frame that we’ll begin in the New York region. 

Senator Lautenberg. The 10 or 11 test communities or ports — 
that are identified for establishing the clearance mechanism does 
not include — a port like the Port of New York and New Jersey, 
which is one of the largest ports in the country. We’re going to 
smaller ports. And I don’t know how long we have to stand and 
wait. If there is any risk at all with the people who come in, drive 
the trucks, and so forth — now, most of the regular port workers 
have ID cards — ^but the trucks that come in by the thousands each 
and every day don’t have any checks going on there. And I wonder 
why it is — that it doesn’t require immediate or critical attention to 
a port like the New York/New Jersey Port, which has exposure to 
all kinds of things that we dread thinking about, like the most dan- 
gerous 2 miles in the country, identified by the FBI, for a terrorist 
attack. 

Mr. Hawley. We’ve spent a lot of time working with the ports 
there, and there’s a lot of security in place. They are right in line 
to get the TWIC program when it rolls out. And, as you know, 
today is the first day we’ve started issuing them, and once we get 
through this — the first couple of rounds, it will 

Senator Lautenberg. How long might that take? 
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Mr. Hawley. Well, I was projecting in the holiday-to-January 
time frame. 

Senator Lautenberg. Holiday? 

Mr. Hawley. Holiday this year. Yes, between now and sometime 
in January. 

Senator Lautenberg. That we might 

Mr. Hawley. Begin 

Senator Lautenberg. — that we might see a rollout in the 

Port of New York/New Jersey 

Mr. Hawley. Yes, sir. 

Senator Lautenberg. — and I want to take a moment to ask Ms. 
Berrick — has your office looked at TSA’s efforts on assessing secu- 
rity of critical infrastructure — ^bridges and tunnels? 

Ms. Berrick. We do. We do have ongoing work, looking at TSA’s 
efforts in that area. We’re going to be completing a report, probably 
in the spring of 2008, so it’s ongoing. And we’re finding that TSA 
is doing what they call, “corporate security reviews,” where they’ll 
go out to these bridges and tunnels and assess the state of security, 
work with the states there. Basically, at this point, it’s in the early 
stages. They’re getting an understanding of what’s being done for 
security. There are some technologies that DHS is pursuing related 
to bridges and tunnels, but it’s still relatively in the early stages. 

Senator Lautenberg. Mr. Chairman, we’ve grown accustomed to 
the pace here, and — not to be critical of the witness, but the fact 
is that deadlines made — don’t mean that deadlines are met. Any 
deferrals of the serious problems that we might encounter on the 
bridges and tunnels is something that ought not to be acceptable, 
and it isn’t. 

Thanks, Mr. Chairman. 

Senator Stevens. Senator Rockefeller? 

STATEMENT OF HON. JOHN D. ROCKEFELLER IV, 

U.S. SENATOR FROM WEST VIRGINIA 

Senator Rockefeller. Thank you, Mr. Chairman. 

Senator Stevens. Sir. 

Senator Rockefeller. I was going to ask a bunch of questions 
on air cargo, but I understand they’ve already been asked. 

Senator McCaskill. Bunch of them have. 

Senator Rockefeller. So, that means that if I read the memos 
that come out of this. I’ll know what the answers were. 

Senator McCaskill. Yes. 

Senator Rockefeller. Or I could ask them. 

Senator McCaskill. You could ask them again. 

Senator Rockefeller. I will. 

[Laughter.] 

Senator Stevens. You know, the famous Simpson statement that 
all the questions have been asked, but not everybody has asked 
them. 

[Laughter.] 

Senator Rockefeller. I am constantly amazed at the asym- 
metry between everybody going through all of this trouble, which 
I thoroughly support and was co-conspirator in writing, with their 
handbags and carry-on bags and all the rest of it, and then know- 
ing that, if it’s a 4-ounce something, I can put it in my checked 
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suitcase, or if I was a terrorist, if it was a 2-pound bomb, I could 
put it in my suitcase, and just check it. I don’t care how many 
times the question has been asked, I don’t understand that. I don’t 
understand why we aren’t doing more on air cargo. 

Mr. Hawley. We are doing more. And we talked a little bit about 
the old report that is now out of date, and some of the things that 
we have done between then and now. I think the critical point is 
that the Committee was instrumental in writing the legislation in 
the 9/11 bill, and I mentioned earlier that we expect to meet the 
deadlines in the bill by the terms written in the bill. We under- 
stand what they mean. 

Senator Rockefeller. Do you have the money? 

Mr. Hawley. To start? Yes, we’re launching, and then, when we 
need more money, we’ll tell you. I think, around January we’re 
going to know more, in terms of what the 

Senator Rockefeller. Is OMB releasing to you the money you 
need to do this? 

Mr. Hawley. It isn’t a money issue right now; so, yes. But it’s 
really at the point of program development. We have enough pro- 
gram development money to get it done — to get it rolled out, and 
then we’ll figure out what the costs are. 

Senator Rockefeller. See, but that sounds to me — like — what 
you’re really saying is, “We’ve got good ideas, and we’re starting to 
implement some of those ideas, but we’re not really sure if we’re 
going to have the money.” 

Mr. Hawley. No, no, no. 

Senator Rockefeller. That’s what it sounds like to me. 

Mr. Hawley. Well — I’m sorry. The — Ms. Berrick mentioned some 
of the experience the international community has in air cargo, and 
that what we’ll be doing is adopting some of those methods at — 
that are compatible with the language of the law, and applying 
those. Some of those do not require congressional appropriations, 
some of them are going to require expenses by other parties in the 
supply chain. I think where the money will come in is when we fig- 
ure out what kind of technology we can deploy, at airports, that 
can handle the cargo that we’re going to see there, and then we 
have to fight out who pays for that. 

So, we are 

Senator Rockefeller. A lot of “ifs.” 

Mr. Hawley. We — pardon me? 

Senator Rockefeller. A lot of “ifs.” 

Mr. Hawley. No, we pretty much know what we’re doing on the 
program, and it has to be driven down to the operational level of 
exactly the details. So, I think — I mean, I — this is a tough deadline, 
to hit 50 percent in 18 months, and we are accepting that chal- 
lenge, and we will meet that. And I believe that, in future years — 
i.e., 3 years from now — that the 100 percent will be done, as well. 

Senator Rockefeller. OK. Oh, boy. Well, good luck. What about 
general aviation? I’ve done a lot of flying on that, which I pay for, 
when I have to get to West Virginia, because we don’t have a lot 
of flight service. And — once, in my entire life, I — have been through 
a screening device. Once. I forget the airport. And I know that you 
have plans for identification and things of this sort, but I have the 
feeling that, in terms of what people carry on, and the cargo, the 
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pilots, the passengers, nobody really has any idea of who they are, 
and, like in everything else, they’re getting a free ride. 

Mr. Hawley. Our — we are working on, as I think we’ve dis- 
cussed, regulations in that area. We’ve done risk assessment in the 
GA community to see what the higher-risk aircraft are, and what 
to do about them. And then — so, I would expect, in the coming 
months, that we’ll come forward with the — a formal program on 
that. We already are working, as you may know, with our inter- 
national partners on identifying aircraft as they come to the United 
States, and also, with the GA community to, as you mentioned, the 
identity validation of who’s flying the aircraft. And then, the pas- 
senger screening comes behind that. 

Senator Rockefeller. Is it — and, I apologize; it’ll just take 3 
seconds — the — is it not true that if you have the right amount of 
explosives in a King Air, that you could pretty much demolish this 
whole complex? 

Mr. Hawley. You know, I think the answer to that is a classified 
answer, but your point is well taken. Certainly, an aircraft of that 
size loaded with explosives would 

Senator Rockefeller. I’m not talking about even a jet, just a 
King Air. 

Mr. Hawley. No, I understand. Yes, I’m 

Senator Rockefeller. Thanks. 

Mr. Hawley. Thank you, Mr. Chairman. 

STATEMENT OF HON. TED STEVENS, 

U.S. SENATOR FROM ALASKA 

Senator Stevens. Thank you. Thank you very much. Senator. 

Ms. Derrick, we’ve got your report, and you touched on it in your 
opening statement, but could you summarize, what does your agen- 
cy think about the progress that has been made on the major pro- 
grams, like TWIG and Secure Flight and cargo security and the 
surface transportation security? Have you judged that, relatively? 

Ms. Derrick. Well, we have given an overall assessment on 
TSA’s progress in both aviation and surface. In aviation, we con- 
cluded, if you look at all the legislative requirements that Congress 
passed. Homeland Security Presidential Directives, DHS’s own 
plans, for aviation we found that TSA met 70 percent of the expec- 
tations that were set out for them related to aviation. This doesn’t 
include the recent requirements in the 9/11 Act. In surface trans- 
portation security, there were much less requirements set out in 
legislation for TSA. There were only five. And we said that TSA 
met three of the five. So, in terms of progress, much more has been 
done in commercial aviation. 

There’s definitely becoming, and we’re seeing through our work, 
more of a focus on surface modes of transportation. 

Senator Stevens. How is that related to the payment into the 
system from the transportation mechanisms you reviewed? I mean, 
it seems to me that the bulk of the money is coming from airline 
passengers, and yet, part of that is going into the other systems. 
Is that right? 

Ms. Derrick. That’s not our — that’s not our understanding. And 
we haven’t looked specifically at how the fees flow in. I know TWIG 
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will be a fee-funded program, the program that you mentioned, 
which is another major effort that TSA is 

Senator Stevens. But that’s, again, airlines. 

Ms. Berrick. I’m sorry? 

Senator Stevens. That’s, again, an airline program, right? 

Ms. Berrick. Well, right now it’s being implemented at the 
ports. Eventually, it may be implemented to other transportation 
modes, including aviation. Right now, it’s just being implemented 
at the ports. 

Senator Stevens. Will it pay for itself? 

Ms. Berrick. That may be a better question for Mr. Hawley. I 
know there were 

Senator Stevens. Well, let me ask 

Ms. Berrick. — appropriations 

Senator Stevens. — him, then. Are these other systems going to 
pay for themselves? You know. I’m a little provincial. Seventy per- 
cent of our travel is by air. And we’re paying, every time we travel. 
I think there are other people, who travel in various modes of 
transportation, that aren’t contributing to this system. Am I 
wrong? 

Mr. Hawley. The TWIG cards will be paid for by the people buy- 
ing them. So, that will be 

Senator Stevens. They’re not paying, now, are they? 

Mr. Hawley. We’re just starting the implementation. But I think 
your larger point, the transit drivers pay a significant part of the — 
or transit users — pay a significant part of the cost. It is paid for 
out of the municipality where they exist. So, in an indirect form, 
I guess through taxes and also from the fare box — but I think your 
point certainly, in dollars in aviation, it is a large chunk of money 
that comes to the Federal Government; in transit, it’s dispersed 
throughout 

Senator Stevens. Well, I pay an exit tax, as well as a tax on my 
airline ticket. The rail passengers don’t do that, do they? 

Mr. Hawley. I don’t believe they pay a separate tax. 

Senator Stevens. How are we going to get to the time when we 
balance this program so that the people involved pay for the secu- 
rity that they’re being delivered? 

Mr. Hawley. I think that’s a larger societal issue. And — you 
know, that it goes to the economic model of how we pay for secu- 
rity. 

Senator Stevens. Well, let me get real provincial. In airports like 
ours, why don’t we have a line for the local residents, and other 
lines for nonresidents? I would go into one of these airports, and 
they would say, “Hi, Ted. Take off your belt and shoes.” Now, why 
can’t we get to the point of recognition of local people? 

Mr. Hawley. We’re working on making the whole process go 
more smoothly. And — I mentioned, earlier, in terms of spreading it 
out, the identity issue — I guess we’re feeling that, at this point, ev- 
erybody should have an exposure to some security, although we are 
looking at breaking that up, based on — random. So, in other peo- 
ple — some people get shoes, trace detection; other people may have, 
you know, belts or something else. 

Senator Stevens. All right. My last question is this. I saw an el- 
derly gentlemen. He was obviously a World War II vet, not very ar- 
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ticulate; he came through the system, and he set it off. And he was 
having a very difficult time, everyone trying to hold wands over 
him, everything else. He had shrapnel in him. Do we have identi- 
fications for those people now, so they don’t have to go through 
that every time they go through that screening? 

Mr. Hawley. No, we don’t. However, we do have — we just de- 
ployed machinery that will make that automatic, so that the people 
with hips and shrapnel or any other implant, basically, will not 
slow them down, so they won’t trigger secondary alarm when they 
go through. 

Senator Stevens. How far away is that? 

Mr. Hawley. Well, we have it in Phoenix today, and we’re going 
to put some — probably four out in 2008. 

Senator Stevens. Well, what do you do with those people, when 
no one really understands it? That gentleman was put into a secure 
room until someone figured out he was a vet with shrapnel in him. 

Mr. Hawley. They usually are able to resolve it at the — right 
there are the magnetometer. And if the individual requests sec- 
ondary screening, of course they’ll take them back. But our officers 
are extremely well prepared for that situation. It happens every 
day. 

Senator Stevens. Senator? 

Senator McCaskill. Back to foreign repair stations, Mr. Hawley, 
the law that was passed in 2003 also mandated that you all begin 
doing auditing of foreign repair stations. How many foreign repair 
stations has TSA audited in the last year? 

Mr. Hawley. I don’t believe that we’ve audited any. 

Senator McCaskill. And so, you’ve had no inspectors traveling 
to foreign repair stations, even the five countries where there are 
foreign repair stations that have been identified, in April of this 
year, as — terrorist safe havens? 

Mr. Hawley. Well, the FAA, as you know, has responsibility to 
be in there, and — for the certified areas — and I think we discussed, 
in your previous round, that we’re preparing the rule, and we’ll be 
deploying our inspectors within 6 months of the rule. 

Senator McCaskill. Well, the law specifically gives TSA the re- 
sponsibility to audit for security; FAA just does safety. You specifi- 
cally have been mandated by Congress to audit for security, and 
you’re saying that has simply not been done. 

Mr. Hawley. No — I’m saying we intend to meet the obligation 
under the law, that we have to put out a rule that will give us the 
regulatory authority to do it. And, when the rule is out, then we 
go and inspect. And I think the law — the 9/11 law is very clear, and 
it says, “We want this rule out quickly” — we are working on it — 
and, “Once you get it out, 6 months later you’d better start inspect- 
ing,” and we will. 

Senator McCaskill. I know you keep referring to the 9/11 law, 
but I think it’s important that you realize that this law, in fact, 
was a 2003 law. It’s not the 9/11 law. It’s been on the books now 
for 4 years, and the requirements are long past due. This is not 
something that we just passed — and the draft rule has been sitting 
around for a couple of years. So, I hope you work on that. 

Let me move to airport screening. I’ve talked about, a major 
issue, which are these foreign repair stations. This is kind of a 
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minor issue, but it’s like I said in another hearing. The face of our 
criminal justice system is our municipal courts — people who get 
traffic tickets, even though our criminal justice system is a lab- 
yrinth of people all over the country at various levels doing a myr- 
iad of important activities to keep our citizens safe. Our face of 
homeland security is airport screening. That’s where most Ameri- 
cans are getting a sense as to whether or not what we’re doing 
makes sense, and whether or not we are comprehensive and 
proactive in our security measures, rather than reactive and incon- 
sistent. And I think that many of the things that have occurred — 
and I understand that they couldn’t be helped, but the changing of 
what you can take on and what you can’t take on — the example 
that Senator Stevens talked about, about the shrapnel, the knees, 
the hips, all of the things, appear to be, sometimes, nonsensical. 
And the one that more people have mentioned to me than anything 
else, and perhaps it’s because I’m a woman, is mascara. Mascara 
does not have a different consistency than lipstick. You can smear 
either one. Lipstick’s OK, mascara isn’t. And the reason I think 
women have mentioned this to me is that — every other makeup 
product you can get, you can get in a powder form or lipstick, you 
can get it in a tube form, which is OK. Mascara is the only one 
that doesn’t come in a powder form, which means, if someone 
wants to avoid having to check a bag, they have to put mascara 
in the little bag, which means it’s not in their purse. If they’re on 
the airplane, they don’t want to carry the mascara along with the 
shampoo in their purse. And no one can explain to me why mas- 
cara is different than lipstick. I haven’t gotten a good explanation. 
So, I figured I’d ask the boss. 

Mr. Hawley. OK. If you can — if you dump it out on the table, 
and it retains its form, it’s OK. If you dump it out on the table, 
and it kind of goes like that, then it needs to be in the 3-ounce con- 
tainer, put in your baggie. And what quite a lot of people do every 
day is put whatever it is they want into that baggie, they — and 
carry it on, and have access to it during the flight. So, it’s actually, 
I think, a pretty convenient way of bring it on. 

Senator McCaskill. I don’t think you’ve talked to enough 
women. 

Mr. Hawley. No, I — well, we’ve — we do. We have a lot of work 
to make these things comfortable for people. The fact of the matter 
is, it’s not nonsensical, and there are people trying to blow up air- 
craft using liquid explosives. And this is the way that we worked 
with the National Laboratories, the FBI, a lot of testing to deter- 
mine what is a safe way to allow men and women to bring what- 
ever they want onto the aircraft. What do you do for people who 
need medicines? What do you do for infants? What do you do for 
breast milk? All of those things, we’ve addressed and figured out 
a way that accommodates the security need, which is a very real 
threat, I can assure you, and also the passenger customer-service 
needs so they can travel without necessarily checking a bag. 

Senator McCaskill. Well, I quarrel with the notion that you can 
dump mascara out on a table. And I hope the next time we have 
a hearing, that you are as righteously indignant about foreign re- 
pair stations and terrorists potentially working under the hood of 
airplanes as you are about the mascara. 
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Thank you, Mr. Hawley. 

Senator Stevens. Senator Lott? 

Senator Rockefeller. Oh, I’m sorry, he hasn’t spoken 

Senator Lott. Please go ahead. 

Senator Stevens. Go ahead. He hasn’t had a first round. That’s 
why I called him. Go ahead. 

Senator Rockefeller. I defer to Mississippi. 

Senator Lott. No, please go ahead. 

Senator Rockefeller. OK. All right. 

I want to go back to this cargo thing — you said 50 percent will 
be screened within 18 months, and virtually all of it, within 3 
years. I don’t believe that. And you can tell me that it’s in your 
plans. I think you are both faced with a fundamental problem that 
anybody who works for any administration faces. You don’t have 
enough money, you are constrained in what you can say, your testi- 
mony this morning was not written by you, free and clear, it was 
vetted by the Office of Management and Budget; therefore, it has 
to agree exactly with what the Bush Administration thinks. The 
Bush Administration puts homeland security as a side issue, rel- 
ative to some wars that we may be fighting. And I just don’t think 
you can get it done. You’ve got a whole list of things that you’ve 
got to do — you’ve got to submit a strategic plan to Congress, 
timelines, testing, you’ve got a great many things you have to do 
before you start to spread this out to the big airports, much less 
the small ones. And if it isn’t all of them, since I consider Ames, 
Iowa, just as vulnerable as I do New York City. I do. You may not, 
but I do. I don’t see any way that you can get it done, and I don’t 
see what’s wrong with your telling us that — frankly, you don’t 
think you can, and what you really need is a whole lot more money 
and a whole lot more emphasis and a whole lot more pushing from 
the Administration. 

Mr. Hawley. That, sir 

Senator Rockefeller. You could get fired, but, you’d be telling 
the truth. 

Mr. Hawley. Well, I can tell you the — a year ago, I would not 
have thought that we could do 100 percent screening in 3 years, 
et cetera. Now I do. And the reason I do is because — and I said, 
at the beginning, this committee worked with us to go through the 
provisions of the law that it — was enacted — that is a doable deal, 
and it is something that we could explain over a period of time — 
and I could give you a briefing — and it would show you — and it is 
a layered and shared responsibility that involves the inspection, 
the screening of a variety of methods, and then securing the supply 
chain along the way, so that each step along the way there’s some 
screening that will get to the same commensurate level with pas- 
senger — or checked-baggage screening by the time it gets to the 
airport. And it’s a very well-developed program, and a lot of it 
we’ve taken from our European partners, specifically the U.K. So, 
this one — I mean, there’s — you’re right, there are 117, 120 taskings 
in this law for TSA, and we take them all seriously. This one, I per- 
sonally was involved in the language and understanding what 
could be done, because I understand how tough it is. And we origi- 
nally had had veto, as you may recall, on this provision, as it was 
earlier in the process, but this was not the subject of a veto threat 
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because — and I give this committee tremendous credit, really, for 
sitting down and working through the thorny details of how we ac- 
tually will do it. So, I’ve — this one, I believe — regardless of what 
anybody else says, this one I personally was involved in, and I be- 
lieve we are going to meet that. 

Senator Rockefeller. OK. Thank you. 

STATEMENT OF HON. TRENT LOTT, 

U.S. SENATOR FROM MISSISSIPPI 

Senator Lott. Mr. Chairman, if I could, just — I have a couple of 
questions here. 

[The prepared statement of Senator Lott follows:] 

Prepared Statement of Hon. Trent Lott, U.S. Senator from Mississippi 

I am pleased that the Commerce Committee is having this hearing to get an up- 
date from the Transportation Security Administration (TSA) on it’s implementation 
schedule of the recently enacted 9/11 bill. I would like to thank both of our distin- 
guished witnesses for being here today. 

I think the work that Mr. Hawley has done at the TSA so far is commendable. 
In the past I have stressed that TSA needs to take a common sense approach to 
security and I think he has done that so far. 

One area that I believe that the Department of Homeland Security and TSA need 
to really focus on is the use of technology to improve the screening process. There 
are many promising technologies that exist, the challenge is to test and deploy them 
expeditiously. I am afraid that in many cases this is just taking too long. Our 
screeners deserve to have the best tool possible to do their jobs. Terrorists are con- 
stantly changing their methods and tactics, we need to adjust as well. 

I encourage TSA to continue to look for practical and innovative ways to address 
security concerns that face our transportation systems. Thank you, Mr. Chairman 
and I look forward to hearing from our witnesses. 

Senator Lott. Mr. Hawley, the GAO testimony points out that, 
while TSA has developed the so-called backscatter technology, “lim- 
ited progress has been made in fielding this technology at pas- 
senger screening checkpoints.” And, as you know. I’ve long been an 
advocate of using innovative technology to screen passengers and 
baggage to move the process along and to also be more thorough. 
I understand that the testing has indicated the technology is very 
effective at detecting explosives and weapons that might be con- 
cealed on a person. Is that correct? And why are you still experi- 
encing delays fielding the backscatter technology? 

Mr. Hawley. The backscatter technology is, as you know, tested 
in prototype, and we are satisfied with its work. We’re going to con- 
tinue to work with it. But it is — it’s meeting expectation, and I ex- 
pect that we will continue the deployment. We’ve talked about add- 
ing additional cities after Phoenix. I also should point out that 
we’ve — we are deploying a significant amount of new technology at 
the passenger checkpoint for carry-on bags, which is a very signifi- 
cant deployment of technology 

Senator Lott. And you are doing that in pilot areas, aren’t you? 

Mr. Hawley. Well, on the checkpoint technology for the pas- 
senger bags, we’ve already done the pilot, and we’ve put out a buy 
to get about 250 of the machines right away. 

Senator Lott. All right, sir. So, you’re still planning on trying to 
go forward with fielding this technology 

Mr. Hawley. Yes, sir. 

Senator Lott. — correct? Uh-huh. 
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One of the problems, I suspect, is that TSA doesn’t have direct 
control over research and development, but they still have to de- 
ploy it. The research and development is done by DHS. You’ve got 
one agency doing the research and development, you’ve got another 
agency that is charged with deploying it. It seems to me like that’s 
the typical Federal Government bureaucratic process. 

Ms. Berrick. We are actually looking at that, as it relates spe- 
cifically to checkpoint technologies. And, as you mentioned. Depart- 
ment of Homeland Security, their Science and Technology Office, 
has a role. They manage all research and development. And TSA 
is a major customer of that. 

What we found was, although DHS Science and Technology man- 
ages research for all of the components, all of the components are 
involved in the requirements for those programs, so there’ll be 
working groups where TSA would be a part of it and could identify 
to DHS what their requirements are. 

We did see some break-downs, though, in communication and co- 
ordination. There’s a Memorandum of Understanding between DHS 
and TSA on how they’re going to work together with technologies. 
And there have been complaints from both sides that that hasn’t 
been fully implemented. So, we’re exploring this further as a part 
of our work, but — we have found that there have been some break- 
downs in communication, but we are seeing that TSA is definitely 
very much a part of that process and are communicating with S&T 
in what their requirements are. 

Senator Lott. I wish you would pursue that, because, again, it 
appears to me that things are better at these airport terminals. I 
still see things that, you know, defy common sense, and I still won- 
der why it takes so long to employ new technology or new proc- 
esses. 

For instance, Mr. Hawley, the Registered Traveler plan, that was 
delayed and delayed and delayed and delayed. I guess it’s been im- 
plemented. Is it being utilized very much? What’s happening with 
that? 

Mr. Hawley. It’s out there, and we’ve got seven operations where 
passengers are going through. And we’ve got 

Senator Lott. “Seven operations,” you mean seven 

Mr. Hawley. Airports. 

Senator Lott. — airports? 

Mr. Hawley. Yes. And about 48,000 people have signed up. And 
so, it is up. It is not running at full speed, I don’t think. I certainly 
wouldn’t say that, and I don’t think 

Senator Lott. What does it cost a registered traveler to go 
through this process and get whatever it is he or she gets? 

Mr. Hawley. It’s about $100, and I think either $28 or $31 of 
that is — goes to the background checking that we do. And the 
promise for Registered Traveler is to get beyond the “cut to the 
front of the line” privilege, which is what it is now. And that’s the 
part that I see as exciting and promising, is additional security de- 
ployed will help and be able to speed up the processing for those 
people, and other identification things that will smooth their way 
through the airport. 

We do have a shoe scanner that one of the providers put out 
there, on their own money, which was terrific, and we’re continuing 
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to work with them to get it to the point where we can use it so 
the people can keep their shoes on. 

Senator Lott. That would be very nice. 

Mr. Hawley. Yup. 

[Laughter.] 

Senator Lott. Thank you very much. 

Mr. Hawley. Yes, sir. 

Senator Stevens. I’m going to put the statement I would have 
made, had I been here at the beginning, in the record after Senator 
Dorgan’s comments. 

I do urge that we find a way to deal with some of these issues 
that the Members have spoken about, because we still have some 
legislation that’s got to go by — across the floor, and I would like not 
to get so many amendments to that, these appropriations bills deal- 
ing with this subject. So, I’d like to find a chance where we might 
visit with you, Mr. Hawley, and the Chairman, before those bills 
come to the floor. 

Thank you very much, Ms. Derrick. 

This concludes this hearing. Thank you very much. 

[Whereupon, at 11:31 a.m., the hearing was adjourned.] 
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Aeronautical Repair Station Association 

Alexandria, VA, October 26, 2007 

Hon. Daniel Inouye, Hon. Ted Stevens, 

Chairman, Vice Chairman, 

Senate Committee on Commerce, Senate Committee on Commerce, 

Science, and Transportation, Science, and Transportation, 

Washington, DC. Washington, DC. 

Re: Submission to Record for October 16, 2007 Hearing on 
Oversight of the Transportation Security Administration (TSA) 

Dear Chairman Inouye and Vice-Chairman Stevens: 

We are writing to address issues raised about the use of foreign repair stations 
at the October 16, 2007 hearing on oversight of TSA. In particular, it is important 
that the leadership of the subcommittee understand the following about foreign re- 
pair station security: 

• Foreign repair stations are an essential component of the global aviation sys- 
tem. Without them there would be no international travel. 

• Security standards do exist for repair stations based on their location. Such 
standards come from existing TSA regulations and the International Civil Avia- 
tion Organization (ICAO). 

• Pushing TSA to quickly produce rules mandating additional security require- 
ments will reallocate limited oversight resources from areas where the threat 
is greatest. 

• Given the broad scope of the aviation maintenance industry, adequate time is 
needed to review any rules proposed by TSA, and mandates for new repair sta- 
tion security rules by August 2008 are unrealistic given TSA’s current re- 
sources. 

While ARSA understands the concern of the Committee that government inaction 
may be putting the public at risk, we wish to underscore the fact that there are 
both safety and security regulations already in place. It is in the best interests of 
the industry to maintain high standards in both of these areas. 

Foreign repair stations are an essential component of the international aviation sys- 
tem. Without them there would be no international travel. 

The Chicago Convention of 1944 and ICAO standards require that the State of 
Registry (i.e., the country in which an aircraft is registered) oversee the mainte- 
nance performed on that aircraft and related components, regardless of where the 
work is performed.^ Consequently, a U.S. registered aircraft requiring maintenance 
while outside of the U.S. must have that work performed by an FAA-certificated 
maintenance provider. Similarly, when an aircraft of foreign registry requires main- 
tenance while in the U.S., only a repair station certificated or validated by the rel- 
evant National Aviation Authority (NAA) may perform the work. For example, only 
a European Aviation Safety Agency (EASA)-certificated repair station may perform 
maintenance on an aircraft of French registry within the U.S. 

Prohibiting or otherwise limiting the use of repair stations overseas would make 
international travel impossible, since aircraft need some level of work performed 
when they land at their destination. Furthermore, foreign authorities may choose 
to take retaliatory action against U.S. counterparts for any restrictions put in place. 

Indeed, it seems such action is possible. In a letter dated October 22, 2007 from 
Mark Wilson, Chairman of the EASA Advisory Board, Congress’s proposals regard- 
ing the requirement for additional inspections of foreign repair stations and pro- 


^See, ICAO Annex 8, Airworthiness, §4.2. 1(b). 
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posed drug and alcohol testing were examined. Chairman Wilson stated, “Adoption 
of such legislative text would bring to an end any possibility to finalise a balanced, 
reciprocal EU-US Bilateral Aviation Safety Agreement (BASA) and association 
Maintenance Implementing Procedures (MIPs) . . 

Given this warning, it is necessary for Congress to closely examine the effect its 
proposals will have not just on the traveling public, but on the global aviation com- 
munity. 

Security standards do exist for repair stations based on their location. Such stand- 
ards come from the FAA, existing TSA regulations, and ICAO. 

Domestically, many repair stations located on an airport are required to have 
their personnel undergo criminal background checks under TSA regulations if they 
require unescorted access to the designated airport security identification display 
area (SIDA). Therefore, a repair station employee that performs line maintenance 
for an air carrier would have the same 10-year criminal background check require- 
ment as an airline mechanic. Many repair stations voluntarily implement additional 
security procedures since the quality and safety of their work directly affects their 
business. 

However, many U.S. repair stations are located miles away from airports and per- 
form specialized work on component parts that have been removed from the air- 
plane and sent to them for repair. These facilities are usually small businesses; 
thus, imposing undue security burdens on them would jeopardize an entire sector 
of highly-specialized workers. Our members understand the need for safety and se- 
curity, since their livelihood depends upon it, and we ask that Congress recognize 
the difference in repair facilities, remembering that our industry shares their same 
goal: maintaining a high level of safety and security. 

Internationally, each country must implement the types of security procedures to 
be followed just as they must do in the safety area. These are based on ICAO stand- 
ards contained in Annex 17 and thus are very similar to TSA regulations. They in- 
clude, but are not limited to: 

• A national civil aviation security program with continuous threat monitoring 
and mandatory quality control procedures; 

• Airport security programs for each airport serving international carriers; 

• Air operator security programs; 

• Background checks for persons implementing security control measures and 
persons with unescorted access to restricted security areas; and 

• Periodic ICAO security audits. 

The professionals at the TSA, ICAO and other countries’ security oversight orga- 
nizations have concluded that resources should be focused where the threat is great- 
est. Therefore, FAA foreign repair stations working on components and located 
miles away from an airport are not required to implement background checks for 
their employees. However, if they perform line maintenance at an international air- 
port or otherwise require access to the ramp area, foreign repair station employees 
would be subject to similar security requirements to their FAA counterparts, includ- 
ing background checks. 

Neither domestic nor international security requirements are based on whether 
a person works for an airline or a repair station; they are dependent on the degree 
of access the individual has to an aircraft. Further, mandating additional security 
requirements where none are truly needed will reallocate limited oversight re- 
sources from areas where the threat is greater. This could have the unintended con- 
sequence of reducing the level of security for the traveling public. 

Pushing TSA to quickly produce rules mandating additional security requirements 
will reallocate limited oversight resources from areas where the threat is greater. 

The testimony given by Assistant Secretary Kip Hawley mentioned several of the 
initiatives TSA is working on to increase safety, from highways and rail, to aviation 
and cargo shipments. Threats exist throughout all modes of transportation, and TSA 
must be allowed the opportunity to prioritize its resources to those areas where the 
threat is greatest. During the October 16 hearing, Assistant Secretary Hawley testi- 
fied that the TSA currently is committed to focusing its resources on “high priority 
items” facing national security interests. 



53 


Given the broad scope of the aviation maintenance industry, adequate time is needed 
to review any rules proposed by TSA, and Congressional mandates for new re- 
pair station security rules by August 2008 are unrealistic given TSA’s current 
resources. 

Congress’s recently passed mandate in section 1616 of H.R. 1 (Public Law 110- 
53) severely limits the ability of TSA to conduct an adequate rulemaking. While 
ARSA understands Congress’s concern over the delay, as stated above, TSA must 
be allowed to prioritize its resources and personnel to address the areas with the 
greatest need. As Secretary Hawley stated in his written testimony, 

“. . . many of the rulemaking requirements mandated in the 9/11 Act do not 
adequately recognize the obligations that TSA must give the many stakeholders 
affected by proposed regulations and the general public . . . These require- 
ments are time consuming but are time well spent to assure that our regula- 
tions achieve their objective in a way that is transparent to stakeholders and 
the public and does not adversely affect travel and commerce.” 

Furthermore, punishing industry for government inaction sets a very dangerous 
precedent. The penalties in section 1616 hurt repair stations and companies who are 
doing their best to comply with existing law, and which do not have the ability or 
influence to force TSA to promulgate these new rules. 

Congress may not have considered the fact that restrictions such as those in sec- 
tion 1616 may adversely affect the trade balance between the U.S. and other coun- 
tries, specifically the EU. There are only 698 FAA-certificated repair stations out- 
side the U.S.; yet there are approximately 1,200 EASA-certificated repair stations 
and numerous other NAA-certificated repair stations in the U.S. 


Conclusion 


Although ARSA has testified before on this subject, we felt it was important to 
underscore the safety and economic necessity of foreign repair stations. With the 
topic of maintenance overseas gaining more and more visibility with the press, it 
is important to emphasize the facts, and not allow legislation or news coverage to 
be based on fear. 

Furthermore, as the possibility of retaliation by foreign civil aviation authorities 
looms, now is the time for the Senate to look carefully at the effect it is having on 
the international aviation community. 

Should you have any questions or require additional information, do not hesitate 
to contact me. 

Regards, 


Marshall S. Filler, 
Managing Director and General Counsel. 


Response to Written Questions Submitted by Hon. Daniel K. Inouye to 
Hon. Edmund S. “Kip” Hawley 

Question 1. Can you provide greater detail regarding the efforts the TSA is taking 
to comply with the new requirements in the 9/11 Commission Recommendations 
Law, that specifies that 50 percent of cargo on commercial passenger aircraft must 
be screened in 18 months and 100 percent screening be achieved within 3 years? 
How does the new system compare with current international efforts to screen cargo 
transported on commercial passenger flights? 

Answer. The Transportation Security Administration’s (TSA) approach to air 
cargo security is comprised of multiple programs, which form a layered security ap- 
proach to include vetting, screening, and risk-based targeting of air cargo to guard 
against potential attack. To comply with the air cargo screening requirements of the 
Implementing Recommendations of the 9/11 Commission Act of 2007, TSA plans to 
build upon established programs and is in the process of developing a Certified 
Cargo Screener Program. Together, enhancements to existing air cargo screening re- 
quirements and the planned Certified Cargo Screener Program will satisfy the re- 
quirement that 100 percent of air cargo transported on passenger aircraft is 
screened to provide a level of security commensurate with the level of security for 
the screening of passenger checked baggage. The Certified Cargo Screener Program 
is an entirely new program that TSA is developing whereby indirect air carriers, 
third party logistics entities, and shippers will perform cargo screening functions 
and implement secure supply chain security practices. The Certified Cargo Screener 
Program will be a robust combination of stringent security standards at the facility 
and personnel level. It will require Certified Screeners to implement secure stand- 
ard operating procedures and utilize chain of custody measures that will establish 
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and maintain the security of cargo as it moves throughout the supply chain. All Cer- 
tified Screeners will be subject to TSA inspection to ensure that they are complying 
with all applicable program requirements. 

TSA’s existing security programs concentrate the responsibility for screening 
cargo to aircraft operators and foreign air carriers, utilizing TSA-approved physical 
and technological screening methods. The Certified Cargo Screener Program will 
similarly require entities that are validated and certified to screen air cargo to use 
TSA-approved physical and technological screening methods. However, a greater 
level of screening can be achieved because screening will be allocated across the air 
cargo supply chain. By spreading the responsibility for screening air cargo to enti- 
ties other than aircraft operators and air carriers, TSA will be able to meet the leg- 
islative mandate that 100 percent of air cargo transported on passenger aircraft be 
screened to provide a level of security commensurate with the level of security for 
the screening of passenger checked baggage. 

TSA has examined and leveraged the United Kingdom’s and Ireland’s Known 
Consignor Programs to provide a solid framework for TSA’s planned Certified Cargo 
Screener Program. These programs require certification of the entity’s supply chain 
security practices and require the entity to implement secure standard operating 
procedures as well as utilize chain of custody measures that will establish and 
maintain the security of cargo as it moves throughout the supply chain. 

Question 2. What efforts does the TSA have underway to develop “in-line” explo- 
sive detection systems (EDS) systems at airports that requested support through the 
agency’s Letter of Intent (LOI) process? How long does the TSA expect it will take 
to deploy in-line EDS systems at the airports that require them? 

Answer. The Transportation Security Administration (TSA) welcomes the oppor- 
tunity to make use of the resources provided in the Implementing Recommendations 
of the 9/11 Commission Act of 2007 to continue its efforts to expand the number 
of airports with in-line checked baggage screening solutions at those airports where 
such a system is determined to be the optimal solution. The Implementing Rec- 
ommendations of the 9/11 Commission Act of 2007 requires TSA to allocate $250 
million each Eiscal Year (2008 through 2028) to support airport improvement 
projects to fulfill Letters of Intent for in-line baggage screening systems. Of the total 
amount, $50 million is to be allocated to projects at small hub and non-hub airports. 

In February 2006, TSA published an Electronic Baggage Screening Program 
(EBSP) Strategic Framework for identifying airports that would benefit from in-line 
systems, and within that framework we have an airport prioritization model (APM) 
to prioritize airports for Federal funding of these checked baggage screening sys- 
tems. 

Pursuant to the Intelligence Reform and Terrorism Prevention Act of 2004, in 
February 2007, DHS turned to the Aviation Security Advisory Committee (ASAC) 
to sponsor a Baggage Screening Investment Study (BSIS). The ASAC, comprised of 
industry stakeholders, outlined a number of financing and cost sharing options that 
could be considered for funding in-line systems. TSA is evaluating each of these op- 
tions, and others, to identify the most efficient and cost effective methods for deploy- 
ing these resources to the highest priority airports. 

Because the aviation industry is dynamic and changes to operations are some- 
times unpredictable, a spend plan is developed each fiscal year designating the 
projects that will be funded using appropriated funds for the purchase and installa- 
tion of checked baggage explosives detection systems (EDS). TSA also determines 
where it is appropriate to reimburse airports for eligible costs associated with in- 
line systems that the airports have already built without Federal funding. TSA con- 
tinues to work with its industry partners and the Administration to effect the most 
economical and effective process available to support construction of these types of 
systems. 

Question 3. When do you expect the TSA to begin testing and implementing the 
Secure Flight program? What do you believe to be the agency’s biggest challenges 
in implementing the Secure Flight program? 

Answer. The following key milestones for the program are based on the Presi- 
dent’s Fiscal Year (FY) 2008 budget request, but are subject to change based on the 
impact of the Continuing Resolution (CR) and final FY 2008 funding: 

• Benchmark testing with volunteer aircraft operators — December 2007 

• Parallel testing begins — Third Quarter FY 2008 

• Domestic cutovers begin — Second Quarter FY 2009 

Funding is the biggest challenge for Secure Flight implementation. In FY 2007, 
the program expended $31 million, but the rate used to calculate the CR is based 
on the FY 2007 enacted level of $15 million. This rate leaves the Secure Flight pro- 
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gram significantly short of funding for the duration of the CR. If the CR extends 
into calendar year 2008, TSA will he forced to take steps that would result in sig- 
nificant delays to the Secure Flight program. Furthermore, funding for the FY 2008 
budget at less than the President’s requested level will delay development and de- 
ployment of Secure Flight. The progress the Secure Flight program has made in the 
last year is substantial with strong forward momentum. The future of this impor- 
tant aviation security program and 9/11 Commission recommendation is in jeopardy 
unless the current funding is resolved. 

Stakeholder understanding and commitment are also important to the success of 
the Secure Flight program. It is a highly visible program including diverse stake- 
holder CToups such as the travel industry, passengers. Congress, airlines, and pri- 
vacy advocacy groups. TSA will continue to reach out to stakeholders to engage 
them in the program and to obtain input. 

Question 4. What actions has DHS taken to establish standards and guidelines 
for developing and implementing the vulnerability assessments and security plans 
for railroad carriers and over-the-road bus operators? 

Answer. 

Freight Railroad 

After September 11, 2001, the freight railroad industry developed and imple- 
mented their own corporate security plans. In an ongoing effort to ensure a robust 
level of security planning, the Transportation Security Administration (TSA) in 2007 
conducted Corporate Security Reviews on all seven of the Class I carriers. These re- 
views include an assessment of a carrier’s plan, its implementation, and if nec- 
essary, TSA recommendations for improvement. TSA’s Corporate Security Review 
(CSR) program is one layer of freight rail security that TSA will use to inform its 
regulatory efforts. 

TSA has begun developing the vulnerability assessment and security plan regula- 
tions for freight railroad carriers required under section 1512 of the Implementing 
Recommendations of the 9/11 Commission Act of 2007. TSA will draw on existing 
Department of Homeland Security (DHS) and private industry knowledge of secu- 
rity planning including the U.S. Coast Guard and infrastructure protection security 
plan regulations and the Association of American Railroads industry plan in devel- 
oping its Notice of Proposed Rulemaking (NPRM) required under the Act. 

Mass Transit 

TSA has begun developing the concepts that will produce the required regulation 
of security plans for mass transit and passenger rail systems. We anticipate the con- 
duct of vulnerability assessments will be a component of the required plans. Con- 
sultation with the mass transit and passenger rail community — including represent- 
atives of systems, law enforcement and security forces, and employee organiza- 
tions — as well as public safety officials will facilitate the development of require- 
ments that meet the statutory requirements and reflect operational realities. 

Mass transit and passenger rail systems operating in the Nation’s sizable metro- 
politan areas are among the most thoroughly assessed of all transportation modes. 
Since 9/11, they have undergone security assessments by the Federal Transit Ad- 
ministration (FTA), the former Office of Grants and Training at DHS (for grant 
funding eligibility), the American Public Transportation Association, private sector 
security consultants (funded by DHS grants), and now under the Baseline Assess- 
ment for Security Enhancement (BASE) program conducted by TSA Surface Trans- 
portation Security Inspectors (STSIs). 

Through the BASE program, TSA assesses a transit system’s security posture on 
the 17 Security and Emergency Management Action Items. The Actions Items cover 
a range of areas that are foundational to an effective security program, including 
security program management and accountability, security and emergency response 
training, drills and exercises, public awareness, protective measures for Homeland 
Security Advisory System (HSAS) threat levels, physical security, personnel secu- 
rity, and information sharing and security. Particular emphasis is placed on posture 
in the six Transit Security Fundamentals (protection of underground/underwater in- 
frastructure; protection of other high consequence systems and assets; random, un- 
predictable deterrence; training; exercises; and public awareness). This program is 
dynamic, with regular reviews to ensure assessment tools continue to reflect secu- 
rity realities and priorities. 

TSA completed BASE reviews of 45 of the largest 50 mass transit and passenger 
rail agencies, plus 8 others ranked in the 51-100 range in size, with the goal of com- 
pleting the largest 100 by the end of Fiscal Year (FY) 2008. Simultaneous with the 
BASE reviews, TSA engaged each of the top 50 agencies directly during January- 
February 2007 to complete self-assessments on their posture in the Transit Security 
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Fundamentals. All 50 agencies completed these self-assessments, showing remark- 
able candor in their review of their respective agencies’ posture. 

TSA development and implementation of focused security programs and initia- 
tives and resource allocations, notably Transit Security Grant Program funds, for 
security enhancement has directly resulted from these reviews. Specific examples 
include the streamlined security training initiative, authorization of grant funding 
for deployment of dedicated anti-terrorism teams, and cooperative agreements on 
risk-based priorities and targeted mitigation projects through the Regional Transit 
Security Working Groups. 

Highway and Motor Carrier 

Many of TSA’s surface transportation modal divisions have conducted threat, criti- 
cality and vulnerability assessments for two to 3 years under the GSR process. The 
process places modal security specialists in stakeholder sites for a thorough over- 
view and analysis of the stakeholder’s security preparedness plans and points of vul- 
nerability. Despite the fact that most surface modes have not yet been subjected to 
TSA regulatory requirements for comprehensive security plans, the Agency has 
made significant progress in identifying security gaps and in recommending appro- 
priate mitigation tools from industry best practices, technology and newly-developed 
policy guidance. The process is especially valuable when it is combined with DHS’s 
intelligence offices and linked to timely and credible threat information. TSA is ex- 
panding its CSR system now with the use of DHS field personnel and on-site law 
enforcement agencies to reach the massive stakeholder community. 

TSA is also partnering with the motorcoach industry and is developing a set of 
security action items (SAI) that when implemented will provide critical gap closures 
within the industry. These SAIs are being vetted through the industry and other 
partners. 

Question 5. What progress has TSA made in implementing its surface transpor- 
tation inspection program? 

Answer. Substantial progress has been made in implementing the TSA Surface 
Transportation Security Inspections Program (STSIP) since its inception in 2005. 

The surface inspectors develop and implement programs and initiatives to im- 
prove regional collaboration and coordination to ensure security resources are ap- 
plied in the most effective manner. For optimal effectiveness, leadership of the 
STSIP at Transportation Security Administration (TSA) headquarters and regional 
levels work in concert with the Office of Security Operations (OSO) Federal Security 
Directors, the Federal Air Marshal Service (FAMS), and the staffs of Transportation 
Security Network Management (TSNM)-Mass Transit and TSNM-Freight Rail. Na- 
tional priorities set by TSNM lead to customized security products that are devel- 
oped in coordination with the STSIP and drive the activities of inspectors on the 
national level. The Transportation Security Inspectors (TSIs)-Surface act as fact 
finders and Ambassadors for TSA’s security policies and programs in the field. 

The success of this integrated OSO-TSNM approach through the STSIP is dem- 
onstrated in the achievements made since the STSIP began operations in earnest 
in the fall of 2005. Highlights include: 

• TSA has advanced a regional engagement strategy for mass transit security by 
networking with transit systems in metropolitan areas to: (1) expand visible, 
random, and unpredictable security activities; (2) facilitate the delivery of secu- 
rity training programs to broader audiences of transit system employees; and 
(3) make security tools available for use in systems; 

• In a coordinated effort involving the Federal Transit Administration (FTA) and 
the Federal Railroad Administration (FRA), TSA developed several comprehen- 
sive security assessment and review programs to determine and elevate the se- 
curity baseline in passenger rail and mass transit. These programs include the 
Security Analysis and Action Program (SAAP), Security Directive Reviews 
(SDR), and the more recent Baseline Assessment for Security Enhancement 
(BASE) program; 

• TSA has completed assessments under the SDR or SAAP programs of multiple 
rail/transit properties; 

• TSA has conducted BASE assessments of 54 transit agencies nationwide, in- 
cluding 45 of the largest 50 transit systems; 

• STSIP Inspectors have conducted more than 1,000 Transit Station Profiles and 
40 rail and mass transit Operations Center Profiles nationwide. These profiles 
provide valuable critical infrastructure data and give the Department of Home- 
land Security (DHS) and TSA an accurate picture of security countermeasures 
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that are in place, the location of the transportation asset, and accurate contact 
information on each asset; 

• In a coordinated effort with the FTA, TSA has engaged with the State Safety 
Oversight Agencies (SSOA) to support the conduct of on-site security assess- 
ments and audits required for heavy rail ii.e., subway) systems under 49 CFR 
Part 659. The initial effort took place in the Bay Area Rapid Transit (BART) 
system. The program is expanding dramatically, due in large part to the coordi- 
nated Federal effort and engagement with the SSOAs through their biannual 
conferences; 

• TSA has partnered with the FTA, the DHS Offices of Grants and Training and 
Science and Technology, the American Public Transportation Association 
(APTA), and the mass transit industry to develop voluntary security standards 
and recommended practices for both mass transit rail and bus transportation; 

• The STSIP participates in the interagency Mass Transit Security Information 
Sharing Network, a forum comprised of subject matter experts from the Depart- 
ment of Transportation, DHS, TSA, and FTA to streamline Federal information 
gathering and exchange to support timely decision-making and information 
products in threat situations, incident response, and normal operations. TSIs- 
Surface channel and receive information through this process in response to in- 
cidents in transit systems in their areas of responsibility as well as during 
international events and regular drills and exercises; 

• TSA has developed a voluntary inspection program of the Nation’s freight rail- 
roads using the Toxic Inhalation Hazmat (TIH) Freight Rail Security Action 
Items to elevate the level of security in freight rail yards, storage facilities, and 
rights of way. To date, STSIs have completed over 1,600 field inspections and 
interviewed more than 3,000 front-line railroad employees in 46 high-threat 
urban areas. 

Although TSA has issued a Notice of Proposed Rule Making for rail and passenger 
rail, there does not yet exist a regulatory regime for the STSIP. At this stage of its 
development, the STSIP performs voluntary assessments only and is primarily in 
a supportive and facilitative role with the mass transit, passenger rail, and freight 
rail communities. 

Close alignment of the STSIs with TSA strategies ensures an integrated approach 
that has demonstrated success in advancing security programs in surface transpor- 
tation. Priority taskings for the STSIP align with national risk-based strategies as 
described below: 

• Security Action Item TIH reviews in freight rail through November 2008. 

• BASE reviews of mass transit systems through the completion of the Top 100 
systems. 

• Security Analysis and Action Program vulnerability and risk assessments in 
freight and passenger rail environments with special emphasis on high threat 
urban areas and major passenger rail infrastructure. 

• Building a nationwide rail and mass transit infrastructure profile database. 

• Supporting Visible Intermodal Protection and Response (VIPR) teams, which 
consist of varying force packages of Federal Air Marshals, TSIs, Transportation 
Security Officers, behavior detection officers, TSA explosives detection canine 
teams, and supporting equipment, that work with local security and law en- 
forcement officials to supplement existing security resources, provide deterrent 
presence and detection capabilities, and introduce an element of unpredict- 
ability to disrupt potential terrorist planning activities. 

In addition to these primary responsibilities, TSIs-Surface are actively involved in 
a variety of other functions critical to TSA’s surface transportation security efforts. 
These include: 

• Security Incident Response — TSIs are responsible for responding on scene to a 
significant surface transportation security incident or natural disaster in order 
to ensure the timely and accurate communication of information to TSA head- 
quarters and the Freedom Center and effective liaison with passenger rail and 
rail and bus transit systems. 

• Heightened Threat Deployments — TSIs staff stakeholder transportation oper- 
ations centers or emergency operations centers, as directed, during periods of 
heightened threat in order to provide timely information from the local level to 
TSA headquarters and the Freedom Center and ensure effective liaison with 
passenger rail and rail and bus transit systems. Additionally, TSIs support 
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other TSA operations during specific threats (for example, providing support to 
TSA airport operations during an aviation-specific threat). 

• Special Event Support — TSIs provide additional operational and subject matter 
expertise to multiagency task forces during National Special Security Events 
(NSSE) or other high threat events. 

• Stakeholder Outreach — TSIs establish and maintain partnerships among public 
and private transportation stakeholders in order to enhance information shar- 
ing capabilities, best practice development, and coordinated response planning. 

• Transportation Security Grant Program (TSGP) — TSIs participate as subject 
matter experts to review grant applications under the DHS TSGP. 

TSIs regularly collaborate with other government and private industry stake- 
holders on large scale assessments that cross jurisdictions and/or have regional im- 
plications. 

TSIs coordinate their activities, when appropriate, with the FRA pursuant to the 
TSA/FRA Memorandum of Understanding (MOU) (September 2006), which outlines 
roles and responsibilities of inspectors as well as inspection coordination require- 
ments. Additionally, there are MOUs between TSA and the FTA and TSA and the 
Pipeline and Hazardous Materials Safety Administration that govern coordination 
of mass transit security and hazardous materials transportation security issues, re- 
spectively. 

• TSIs accompany FRA safety inspectors on their compliance reviews under 49 
CFR Part 239 (emergency preparedness plans and programs for passenger/com- 
muter rail). 

• TSIs coordinate with other agencies during response to significant security or 
other incidents that impact surface transportation. 

• TSIs regularly participate on regional security roundtables and working groups 
that include Federal, State, and local governments, as well as industry rep- 
resentatives. 

• TSIs collaborate with the SSOAs that have a specific responsibility for security 
oversight of rail fixed guideway systems under 49 CFR Part 659. 

• TSIs regularly participate in local emergency response drills and exercises. 

• TSIs participate on TSA VIPR teams, which consist of varying force packages 
of Federal Air Marshals, TSIs, Transportation Security Officers, Behavior De- 
tection Officers, TSA explosives detection canine teams, and supporting equip- 
ment, that work with local security and law enforcement officials to supplement 
existing security resources, provide deterrent presence and detection capabili- 
ties, and introduce an element of unpredictability to disrupt potential terrorist 
planning activities. 

• TSIs participate on National Transit Security Roundtables, which are twice 
yearly forums that bring together the security chiefs and directors from the top 
50 transit agencies (by passenger volume) in a working seminar to develop ef- 
fective solutions to security challenges. 

• TSIs participate in PortSTEP exercises, which are intergovernmental, multi-ju- 
risdictional regional exercises executed through the Area Maritime Security 
committees. 

• TSIs represent TSA in the joint initiative of the American Public Transpor- 
tation Association Standards Development Committee and Federal security 
partners (TSA, FTA, and DHS Standards Executive and the Federal Emergency 
Management Agency) to develop operational and technology security standards. 

Question 6. The 9/11 Commission Recommendations Law requires significant lev- 
els of cooperation and coordination between the TSA and the DOT in order to en- 
hance security while improving efficiency and the use of Department resources. Can 
you describe the efforts that your agency is taking to strengthen your relationship 
with DOT? Are you getting the cooperation you need from Transportation Secretary 
Mary Peters? 

Answer. The Department of Homeland Security (DHS), the Transportation Secu- 
rity Administration (TSA), and the Department of Transportation (DOT) have an 
ongoing, active, and cooperative relationship concerning security matters. Each 
mode maintains a Government Coordinating Council that includes representatives 
from DHS, TSA, DOT, and other appropriate Federal agencies. The tasks from the 
Implementing the Recommendations of the 9/11 Commission Act of 2007 are dis- 
cussed and, as appropriate, are collaboratively addressed through these councils. In 
addition, DHS, TSA, and DOT jointly evaluated the requirements of the Act, agreed 
to the designations of lead agencies, and identified points of contact. DHS, TSA and 
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DOT are also cooperating through other existing committees, councils, and working 
groups to coordinate research and development, cyber security, and threat assess- 
ments, HAZMAT regulations, transportation system recovery planning, and aviation 
security operations and planning. 

Question 7. Your testimony suggests that since the budget allocations and home- 
land security appropriations bill were considered prior to enactment of the 9/11 
Commission Recommendations Law, appropriations equal to the funding authorized 
by it are unlikely. Given that these programs and funding levels were provided 
based on the recommendations of the 9/11 Commission, will the President be re- 
questing additional funding in FY 2008 either through a Supplemental Appropria- 
tions request, or a budget amendment? 

Answer. The President has submitted an Amendment to the Fiscal Year (FY) 
2008 Budget Request to address critical security gaps identified in the FY 2007 Na- 
tional Intelligence Estimate. While the Amendment was not specifically formulated 
to address the Implementing Recommendations of the 9/11 Commission Act of 2007 
requirements, it does contain funding for two of the mission-critical items identified 
by the Act. The FY 2008 Budget Amendment proposes $20 million in funding for 
10 additional Visible Intermodal Protection and Response teams which will provide 
protection in multiple modes of transportation as well as $10 million to support 92 
additional K-9 teams for multi-modal coverage (46 teams through Cooperative 
agreements and 46 TSA-led teams). 

Question 8. The Department of Homeland Security Appropriations Act of 2006 
consolidated all of the funding for the Department’s research and development func- 
tions within the Science and Technology Directorate (S&T). In August 2006, you 
signed a Memorandum of Understanding (MOU) with S&T which shifted the Trans- 
portation Security Laboratory (TSL) from TSA to S&T. Do you think this consolida- 
tion has weakened the TSL’s core mission and made the process for certifying EDS 
for the TSA more inefficient? Please explain why or why not. 

Answer. Shifting the Transportation Security Laboratory (TSL) from the Trans- 
portation Security Administration (TSA) to the Science and Technology Directorate 
(S&T) has not weakened TSL’s core mission. As a customer of the S&T Directorate, 
TSA’s work remains the number one priority of TSL. 

The S&T Directorate is working closely with TSA to ensure that the S&T Direc- 
torate is meeting TSA’s priorities and requirements. TSL has accomplished priority 
certifications and qualifications of equipment for TSA, including work with EDS, in 
a timely fashion. 

Question 9. To what extend has the DHS, the TSA and the TSL considered the 
qualification and certification of EDS for use in modes of transportation other than 
aviation? 

Answer. The Transportation Security Administration (TSA) is responsible for cer- 
tifying and qualifying technology across all modes of transportation. The Science 
and Technology (S&T) Directorate and TSL support TSA and other customers in de- 
veloping solutions that can fill their technology gaps. These technology gaps are 
identified in a collaborative process where TSA works with S&T and TSL on a con- 
tinuing and reoccurring basis. 

Question 10. On Wednesday, October 3, 2007, you announced that Honolulu, Ha- 
waii, would begin to enroll seaport personnel for TWIG in mid-November. That time 
has arrived and no one with the TSA nor with the contractor Lockheed Martin can 
provide the most basic operational information such as how many trusted agents are 
hired and trained to enroll workers; how many fixed and mobile enrollment stations 
will be deployed; or what the enrollment facilities’ hours of operation will be. How 
confident are you that this enrollment process will be implemented efficiently, suc- 
cessfully, and on time? 

Answer. The enrollment center in Honolulu opened on November 7, 2007. Lock- 
heed Martin provided Port stakeholders with advance notice of the plans for when 
pre-enrollment and enrollment activities were to begin. There are 4 trusted agents 
staffed at the Honolulu enrollment center, with two fixed and one mobile enrollment 
station. The hours of operation are Monday through Friday from 8 a.m. to 5 p.m. 
However, Lockheed is currently evaluating changing these hours to 7:30 a.m. to 4:30 
p.m. in order to better accommodate the workforce. 

Question 11. When can we expect to see the deployment schedule for the TWIG 
program at the other 134 enrollment locations? 

Answer. On October 31, 2007, the Transportation Security Administration (TSA) 
released a general schedule for all 147 enrollment locations. TSA and the U.S. Goast 
Guard expanded the original list of 134 to 147 based on stakeholder input. This list- 
ing provides monthly or quarterly deployment time-frames. The list is available to 
the public on TSA’s website at www.tsa.gov ! twic. As the start of the enrollment pe- 
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riod for each grouping of ports nears, TSA will post a specific enrollment start date 
in the Federal Register. To date, TSA has announced the start of enrollment for 22 
locations in the Federal Register. 

Question 12. How does an employer go about arranging for a trusted agent to en- 
roll employees at its facility? 

Answer. If an employer is interested in arranging for a mobile enrollment center, 
they should contact the Lockheed Martin Operations Manager, Stacy Bonnah- 
DeMoss at 703310-9157 or the Field Coordinator to discuss arrangements at the re- 
questor’s facility. 


Response to Written Question Submitted by Hon. Ted Stevens to 
Hon. Edmund S. “Kip” Hawley 

Question. The recently enacted 9/11 Commission recommendations legislation 
(Pub. L. 110-53) provides significant resources and an expanded Letter of Intent 
program to expedite the installation of in-line electronic screening systems for the 
enhanced screening of checked baggage at our Nation’s airports. 

The Committee was clear on its intent that TSA and the Administration should 
fully utilize the 20 year horizon for LOIs. However, the Committee is concerned by 
rumblings that the Administration may be pursuing a limited short-term view of the 
program, which would have detrimental effects on the ability of airports to obtain 
requisite funding from the financial bond markets. 

Is it TSA’s intention to issue multi-year Letters of Intent to airports for in-line 
projects? Can TSA assure the Committee that the Department will issue multi-year 
LOIs for in-line systems in FY 2008, in accordance with the law? 

Answer. The Transportation Security Administration (TSA) welcomes the oppor- 
tunity to make use of the resources provided for in the 9/11 Commission rec- 
ommendations legislation to continue its efforts to expand the number of airports 
with in-line checked baggage screening solutions, at those airports where such a 
system is determined to be the optimal solution. TSA will continue to work with its 
industry partners and the Administration throughout Fiscal Year 2008 to affect the 
most economical and effective process available to support construction of these 
types of systems. 


Response to Written Questions Submitted by Hon. Frank R. Lautenberg to 
Hon. Edmund S. “Kip” Hawley 

Question 1. When will TSA begin enrolling workers at the Port of New York and 
New Jersey in the TWIC program? What about the Port of Philadelphia/Camden? 

Answer. Enrollments at the Port of New York and New Jersey are currently tar- 
geted to begin the week of December 17, 2007. There will be a total of 3 sites. The 
other two will open within a month of the opening of the first site. Enrollment at 
the Port of Philadelphia/Camden is currently targeted to begin the week of Decem- 
ber 10, 2007. A second site is targeted for mid-2008. Plans are being finalized for 
these locations and notifications to port stakeholders will begin shortly. 

Question 2. Do you believe our Nation’s rail and vehicle bridges and tunnels are 
sufficiently protected against terrorist attack? Has the Department completed a se- 
curity assessment of the Nation’s rail and vehicle bridges and tunnels? 

Answer. The Transportation Security Administration (TSA) considers mitigation 
of risk to underwater transit tunnels as a strategic priority. Protecting this infra- 
structure requires an integrated approach aligning Federal capabilities with mass 
transit and passenger rail systems that operate in this infrastructure. To harness 
Federal expertise and advance coordinated effort, TSA convened an interagency 
Tunnel Risk Mitigation Working Group in 2006. This interagency effort brings to- 
gether Subject Matter Experts from a range of relevant fields among Department 
of Homeland Security and Department of Transportation organizational elements to 
identify, assess, and prioritize the risk to mass transit and passenger rail systems 
with underwater tunnels in the United States. This effort also assists transit agen- 
cies in planning and implementing protective measures to deter and prevent attacks 
as well as blast mitigation and emergency response strategies in the event of a ter- 
rorist attack and/or all hazards incident or event. 

Through regular meetings, this working group has developed mitigation strate- 
gies, engaged stakeholders, analyzed and applied the results of risk assessments, 
prepared statements of work for testing and modeling programs, and integrated the 
overall risk mitigation effort for a cohesive, coordinated, and effective approach. The 
initiative has: 
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• Identified and assessed risk to all 29 underwater tunnels in the nation; 

• Prioritized tunnel risk mitigation based on risk to drive grant funding to most 
pressing areas; 

• Developed strategies for funding future technology research and development 
aimed at producing novel approaches to this challenging problem; and 

• Produced and disseminated recommended protective measures transit agencies 
may implement to enhance security with available resources or through tar- 
geted grant funding. 

These recommended measures derive from the experience gained in Federal secu- 
rity assessments and the ongoing work to identify and prioritize tunnels and de- 
velop a strate^c plan to mitigate risk. The interagency group is working closely 
with the transit industry to ensure the implementation of protective measures to 
mitigate risk in transit tunnels. TSA security assessments of passenger rail and 
mass transit agencies with tunnel infrastructure include review of protective meas- 
ures implemented to mitigate risk. 

To advance this concerted effort, the Transit Security Grant Program has made 
projects to protect high risk underwater and underground assets and systems a top 
funding priority. 

Question 3. A report on the security of bridges and tunnels in the New York/New 
Jersey region was due last March. When will you submit this report to Congress? 

Answer. A classified report, as required by the Department of Homeland Security 
Appropriations Act, 2007, was delivered to the Chairman and Ranking Members of 
the Senate Committee on Commerce, Science, and Transportation, the House Com- 
mittee on Transportation and Infrastructure, and the House and Senate Committees 
on Appropriations on October 22, 2007. 

Question 4. Do you know how much funding will be required to better secure our 
Nation’s highest-priority bridges and tunnels, especially high-priority rail tunnels? 

Answer. The Transportation Security Administration (TSA) recognizes, through 
the assessments it has conducted, that there are operational and structural aspects 
to improving bridge and tunnel security and that each bridge and tunnel requires 
varying approaches to achieve the desired level of security. TSA, State and regional 
authorities, and the owners and operators of the highest priority bridges and tun- 
nels have focused their efforts primarily on operational security solutions that in- 
clude: establishment of an interagency Tunnel Risk Mitigation Working Group, as- 
sessment of vulnerabilities of the Nation’s 29 underwater transit tunnels, develop- 
ment of security recommendations and guidelines, assessment of risk mitigation 
measures employed through the Baseline Assessment for Security Enhancement 
Program inspections conducted by TSA Surface Transportation Security Inspectors, 
deployments of Visible Intermodal Protection and Response Teams, and increased 
security awareness campaigns. 

As an example, one of the most s 3 Tnbolic of America’s highway bridges has been 
spending approximately $6 million annually just on security. They have invested in 
intruder detection technology and personnel to monitor those devices, perimeter 
fencing, structural hardening, and both full- and part-time emergency response staff 
as well as oversight contracts with local law enforcement units. While improvements 
in technology may help displace personnel costs in the future, the security needs of 
just the Nation’s most critical bridges and tunnels will involve significant costs for 
many years to come. 

The Transit Security Grant Program funds many operational initiatives. In Fiscal 
Year (FY) 2006, $136 million was awarded under the TSGP. About one-third of that 
amount was awarded for operational security improvements in the Nation’s most 
critical tunnels. The FY 2007 awards have not been finalized. 

Structural security improvements require a substantially greater investment. Ef- 
forts are underway to determine the requirements for security improvements, and 
ultimately the costs of those improvements, at some of the Nation’s highest priority 
underwater tunnels. Structural options under consideration include the replacement 
of antiquated structures or hardening existing structures to improve their resilience 
to attack. The costs of these initiatives are roughly estimated to be between $100 
million to $500 million per structure for hardening and up to several billion dollars 
per structure for replacement. 

Question 5. When will TSA comply with Section 125 of the SAFE Port Act of 2006 
concerning threat assessments of port truck drivers? 

Answer. The Transportation Security Administration (TSA) anticipates completion 
of the threat assessments for port truck drivers by summer 2008. Collection of driv- 
er information from all state motor vehicle licensing agencies is underway at this 
time. There is substantial variation in the technological capabilities of the states. 
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leading some to respond to TSA’s request earlier than others. Also, as the Transpor- 
tation Worker Identification Credential is deployed across the country we will enroll 
these drivers and they will go through a much more thorough check than the name- 
based check, and it will be done perpetually. 

Question 6. Will the President request sufficient levels of security funding for Am- 
trak’s capital and operating needs in the Department of Homeland Security’s 2009 
budget? Do you anticipate that Amtrak will be required to use funding from sources 
other than DHS grants for these functions? 

Answer: The Department of Homeland Security has been working in conjunction 
with the Department of Transportation and the National Railroad Passenger Cor- 
poration to identify and address security needs for Amtrak. Historically, Federal 
grant assistance has been provided to Amtrak through FEMA’s Grant Programs Di- 
rectorate both for capital and operating needs. 

DHS believes that sufficient levels of security funding for Amtrak’s capital and 
operating needs will be included in the President’s Fiscal Year 2009 Budget Re- 
quest, and does not anticipate additional funding requirements from sources other 
than DHS grants. 

Question 7. Since the inception of the agency, how many TSA employees have no- 
tified the Office of Special Counsel of agency abuse, fraud, or waste pursuant to 
whistleblower complaint procedures and are still employed by the TSA? How many 
complainants are no longer employed by the TSA? 

Answer. The Office of Special Counsel (OSC) does not provide the Transportation 
Security Administration (TSA) with the names of all complainants or the number 
of employees who have filed complaints pursuant to the whistleblower complaint 
procedures. OSC only notifies TSA when OSC determines that it is appropriate for 
a complaint to proceed to mediation or a full investigation. Throughout Fiscal Years 
2006 and 2007, there were 14 active complaints in OSC’s investigative process. Two 
of these are still open investigations and one has been settled. The remaining 11 
have all been closed by OSC with no further action taken. Three of these 14 individ- 
uals are currently TSA employees (one has one of the open investigations, two had 
cases closed with no further action). 

Question 8. What is TSA doing to improve its ability to check passenger carry- 
on bags for explosives? 

Answer. To drive improvement in the screening system nationwide, the Transpor- 
tation Security Administration (TSA) has made covert assessments very difficult for 
our screening workforce, and we frequently use high-level vulnerability testing to 
identify best practices in explosives detection. We believe that covert testing is a 
powerful tool to identify vulnerabilities in the system, and we are building a culture 
of heightened awareness of threat items at every airport in the country. 

A key to building this culture is the implementation of covert drills involving sim- 
ulated improvised explosive devices (lEDs) for the screening workforce. As part of 
this effort, TSA deployed 5,800 bomb test kits to the field and provided intensive 
onsite training to every Transportation Security Officer (ISO). lED recognition is at 
the forefront of our training objectives, and we have incorporated emerging threats 
such as liquid explosives. Today, TSA conducts 2,600 lED recognition drills a day, 
and we are currently conducting a study to identify an optimal level and frequency 
of drills. 

Further, TSA recognized that a more systematic, nationwide framework to assess 
the effectiveness of the screening process and identify areas to focus our resources 
in training and technology was needed. Therefore, TSA instituted a comprehensive 
program to measure screening performance called the Aviation Screening Assess- 
ment Program (ASAP). ASAP is aggressively focused on improving recognition of 
lEDs, and TSA has performed thousands of covert assessments at airports across 
the country in just 6 months. Through ASAP, we are assessing our performance 
every day in every aspect of the screening process. 

Findings from ASAP are reported directly to TSA leadership, and we will use 
these performance metrics to make strategic decisions within the screening environ- 
ment, from the type of equipment TSA purchases to the type of training TSA deliv- 
ers to our TSOs. 

In addition, TSOs undergo extensive individual training using the Threat Image 
Projection (TIP) system, which displays fictional threat items within x-ray images 
of actual passenger bags in order to evaluate the ISO’s ability to detect threat items. 
TSO responses are recorded and downloaded monthly for analysis and reporting. 
TIP is a multifunctional system that extends well beyond an evaluation tool. It pro- 
vides screeners with real-time experience in detecting threats and resolving alarms 
in passenger baggage. It is an immediate feedback and reinforcement system that 
increases screener accuracy. At a higher level, TIP data shows performance trends 
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by airport and nationally and these trends help TSA identify national training 
needs. 

The result of all of these performance assessment efforts is that our TSOs are the 
most tested workforce in the country. TSOs are tested every day, on every shift, at 
every checkpoint in the United States, and we believe that this intensive activity 
will drive the improvements we all desire in our explosives detection capabilities. 

To support our lED training initiatives, the Bomb Appraisal Officer (BAO) Pro- 
gram has been instituted at our Nation’s airports. BAOs spend a substantial 
amount of their time providing lED training to TSOs. Their expertise proves invalu- 
able when conducting this training. This program is still in the deployment phase, 
having grown from an initial class of 13 to more than 100 BAOs currently in the 
field. As of October 2007, BAOs have conducted over 12,500 hours of training to ap- 
proximately 40,000 TSOs. 

In addition to the training and testing of TSOs, we are working hard to deploy 
new explosives detection technology, including backscatter and millimeter wave im- 
aging, automated explosives detection systems, and other technologies that will play 
an important role in TSA’s layered security approach. The deployment of advanced 
technology will be guided by a 5-year strategic plan that has two core goals: (1) im- 
proving explosives detection capabilities, and (2) developing the capacity to detect 
hostile intent before and during the screening process. Examples of this technology 
include: 

• Whole Body Imagers. We are field testing whole body imagers, such as the 
backscatter and millimeter wave technologies, to quickly and safely screen pas- 
sengers for prohibited items without the need for physical contact. Eield testing 
is underway at Phoenix, and test sites will be expanded to two other major air- 
ports in early 2008. 

• Bottled Liquids Scanners. After recently completing field testing at six major 
airports, we have purchased and are deplo 3 dng over 200 bottled liquids scanning 
devices at checkpoints, and are now using a hand-held liquids scanner for non- 
checkpoint screening locations. 

• Hand-Held Explosives Scanners. In the 3rd quarter of the 2007 Fiscal Year, we 
purchased 23 hand-held explosives scanners to supplement the over 50 devices 
now in use. These devices are mobile and can be used for explosives detection 
at non-checkpoint locations. 

• Advanced Technology (AT) X-ray. We have recently completed field testing of 
AT X-ray equipment for carry-on baggage at four airports. This technology will 
provide TSOs with enhanced capability to identify and detect threats through 
improved imagery and analysis tools. We will begin deploying these systems in 
2008. 

• Checkpoint Automated Carry-On Explosives Detection Systems (Auto-EDS). We 
are field testing Auto-EDS for inspecting carry-on items at four additional air- 
ports, and we have plans to test these systems’ capabilities to inspect both 
carry-on and checked baggage at smaller airports. Auto-EDS supports enhanced 
threat detection through computed tomography X-ray, 3D imagery and auto- 
mated explosives and weapons detection. A limited quantity of these systems 
is expected to be deployed in 2008. 

• Cast and Prosthesis Scanner. After completing field testing at three airports, we 
have purchased cast and prosthesis scanners to provide a safe, dignified, and 
non-invasive way to identify potential threats and clear passengers wearing 
casts, braces, and prosthetic devices. Deployment activities for these units are 
expected to begin in 2008. 

We will continue to explore additional technologies to maintain our evolving abil- 
ity to detect prohibited items at checkpoints. 

An initiative critical to the second core goal is Screening of Passengers by Obser- 
vation Techniques (SPOT), a program initiated to develop strong behavior observa- 
tion skills in our TSOs. TSA must not make the mistake of focusing so intently on 
the property individuals carry through checkpoints that we miss indicators that an 
individual could be engaged in criminal and/or terrorist activity. SPOT systemati- 
cally identifies high-risk passengers exhibiting significant levels of stress, fear, and 
deception associated with criminal intent, allowing our officers to either refer the 
passenger for enhanced screening or to law enforcement. 

Because behavioral screening has a strong record of effectiveness in the preven- 
tion of criminal and terrorist activity, TSA has significantly increased the number 
of airports with SPOT to now cover over 75 percent of the traveling public. To date, 
TSA Behavior Detection Officers have made passenger referrals resulting in 391 ar- 
rests. The program will be expanded to 155 airports in 2008. 
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A third initiative strengthening security at our checkpoints is the Optimization 
Program. Through this effort, TSA sends optimization teams to airports to observe 
their checkpoints in action and find ways to improve how they operate. The teams 
are made up of experts in screening procedures, staffing models, equipment and 
checkpoint design, and passenger flow, and they improve security by reducing pas- 
senger delays and frustration and eliminating structural problems that are obstacles 
to an effective screening process. Recommendations from the optimization team are 
presented to the airport’s Federal Security Director, and every recommendation is 
tracked at TSA headquarters to ensure that airports are provided the assistance 
they need to be successful. 


Response to Written Questions Submitted by Hon. Trent Lott to 
Hon. Edmund S. “Kip” Hawley 

Question 1. The GAO’s testimony points out that while TSA has developed 
backscatter technology, “limited progress has been made in fielding this technology 
at passenger screening checkpoints.” As you know, I have long been an advocate of 
using innovative technology to screen passengers and baggage. My understating is 
that testing has indicated that this technology is very effective at detecting explo- 
sives and weapons that might be concealed on a person, is this correct? Why have 
there been delays in fielding backscatter technology? 

Answer. The Transportation Security Administration (TSA) is currently con- 
ducting a field operational pilot of whole body imaging technology; which includes 
both backscatter and millimeter wave technology. While laboratory testing has vali- 
dated detection capabilities of whole body imaging technology, it is crucial to also 
evaluate technology on its operational effectiveness and efficiency prior to procuring 
technology for full deployment. Additionally, TSA, in consultation with the DHS Pri- 
vacy Office, continues to work closely with the vendors in the development of pri- 
vacy protection algorithms that will not diminish the effectiveness of the technology. 
TSA is currently conducting the pilot of backscatter and millimeter wave tech- 
nologies at Phoenix Sky Harbor International Airport and is expanding it to Los An- 
geles International Airport and John F. Kennedy International Airport in New York. 
A pilot using only millimeter wave technology is planned for the Miami Inter- 
national Airport. TSA anticipates completing the operational pilots by the end of the 
third quarter in Fiscal Year 2008 and will make procurement and deployment deci- 
sions based on the results of the pilot. 

Question 2. The 9/11 bill requires that TSA develop a strate^c plan for deplo 3 dng 
explosive detection equipment at airport checkpoints. What is the status of this 
plan? 

Answer. The report to Congress required by the Implementing Recommendations 
of the 9/11 Commission Act of 2007, entitled “Aviation Security Report — Develop- 
ment of a Passenger Checkpoint Strategic Plan,” dated September 2007, was deliv- 
ered to Congress, including the Senate Committee on Commerce, Science, and 
Transportation, on October 4, 2007. 
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